FreeDomain.co.nr Clone SQL Injection

[kw3rln]

FreeDomain.co.nr Clone SQL Injection

Auth0r: Kw3rln from Romanian Security Team

Link: hTTp://RSTZONE.NET

On members.php we have:

#14: $logindomain = $_POST["logindomain"];

#41: $login=login_user($logindomain,$loginpass);

in includes/functions we have:

function login_user($user_name, $pass_word) {

global $redir_table;

// form our sql query

$result = mysql_query("SELECT * FROM $redir_table WHERE host ='$user_name'") or die (mysql_error());

Exploit s00n

greetz to all RST memberz