PlanetCreator has reported another critical SQL Injection (vulnerability) on Gulf Tranvels and Tours : Your reliable agency in Myanmar http://www.myanmartravelsgulf.com powered by IndexMyanmar

This vulnerability has been alerted to :- ” [email protected] , [email protected] , [email protected] , [email protected], [email protected],[email protected] , [email protected] ”

SQL injection is a code injection technique that exploits a security vulnerability occurring in the database layer of an application. The vulnerability is present when user input is either incorrectly filtered for string literal escape characters embedded in SQL statements or user input is not strongly typed and thereby unexpectedly executed.

Applications: ———— PlanetCreator’s_Universal_Advanced_Internet_Security_T00L
System Time: ———— (UTC+08:00) Yangoon, Myanmar , 18/09/2010 09:38:33 PM
Host IP: 198.68.161.4
Database: mmtravelsgulf

Some Tables are as follow :

gulf_welcome
gulf_visa
gulf_trip_info
gulf_trip
gulf_traveltips
gulf_transportation
gulf_route
gulf_rentcar_detail
gulf_rent_carinfo
gulf_rent_car
gulf_promotion
gulf_price
gulf_myanmar_cruise
gulf_jetty
gulf_hoteltype
gulf_hoteldetail
gulf_hotel_list
gulf_footer
gulf_flight_schedule
gulf_embassy
gulf_domestic
gulf_charter
gulf_car_service
gulf_car
gulf_boat
gulf_balloons
gulf_advertise
gulf_admin
gulf_aboutus

We hope that your security staff will look into this issue and fix it as soon as possible.

Explore More

How to Detect a Hacker Attack

If a hacker breaks into your computer, just noses around, and makes no changes to your computer, it’s not easy to tell he’s been there. There’s no alert that says,

Read More

Critical XSS Vulnerability in http://shwephonecard.com registered parent company is “MMM Network L.L.C.”

PlanetCreator.Net’s Security Team Member Info Freakzz <infofreakzzz(at)gmail.com> has reported another critical XSS vulnerability on http://www.shwephonecard.com  registered parent company is “MMM Network L.L.C.” These are some information from Vulneral Site http://www.shwephonecard.com:

Read More

Critical SQL Injection and XSS Vulnerability in Myanmar Engineering Society

PlanetCreator has reported another critical SQL Injection (vulnerability) on Myanmar Engineering Society Website http://www.mes.org.mm SQL injection is a code injection technique that exploits a security vulnerability occurring in the database

Read More