[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
2 SQL Injection in Fantastic News
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: 2 SQL Injection in Fantastic News
- From: S3ude@xxxxxxxxxxx
- Date: 26 Feb 2006 21:13:37 -0000
Software: Fantastic News
Web Site: http://www.fscripts.com
Versions: 2.1.1
Type: 2 SQL Injection
Class: Remote
Exploit :
1-
http://www.target.com/news.php?action=news&category=|sql
2-
http://www.target.com/news.php?page=|sql
Discovered by: SAUDI
L-G-H Team
http://www.lezr.com
Regards ///