Exploit Easy Travel Portal - SQL Injection

[Exploiter]

EDB-ID

13900

Проверка EDB

1. Пройдено

Автор

L0RD CRUSAD3R

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

null

Дата публикации

2010-06-17

Author: L0rd CrusAd3r aka VSN [[email protected]]
Exploit Title:Easy Travel Portal SQl Vulnerable
Vendor url:http://www.softwebsnepal.com/
Version:2
Price:n/a
Published: 2010-06-17
Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to
all ICW members.
Spl Greetz to:inj3ct0r.com Team, Andhra hackers.com

~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~

Description

Admin Panel:
This software comes with admin panel form where you can check the number of
listing and do the options like edit / delete . Admin can set email setting
form the admin panel.


Country list:
Upload information of your travel country wise. You can upload country
information like weather, culture, best to wear e.t.c so that to provide
more information about each country for your Visitors.


Hotel details / Travel information:
Admin can upload hotel and travel details for each country like hotel photo,
rates, hotel location , hotel facilites from admin panel so that visitors to
the website can see all these when they log on to website. Since admin can
upload photo, and update information about hotel's and travel plan, its easy
to give new and updated information to customers.


~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~

Vulnerability:

*SQLi Vulnerability

DEMO  :

http://server/traveldemo/tour_packages.asp?country=[sqli]

http://server/traveldemo/hoteldetails.asp?id=[sqli]

http://server/traveldemo/tourdetails.asp?id=[sqli]

http://server/traveldemo/viewnews.asp?id=[sqli]


# 0day n0 m0re #
# L0rd CrusAd3r #


-- 
With R3gards,
L0rd CrusAd3r