Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

phpPC 1.04 Multiples Remote File Inclusion

Pearl Forums 2.4 Multiple Remote File Include Vulnerabilities

PhotoCart 3.9 (adminprint. php) Remote File Include Vulnerability

Vulnerability in PostNuke

From:	Advisory_(at)_Aria-Security.net <Advisory_(at)_Aria-Security.net>
Date:	22.11.2006
Subject:	gNews Publisher SQL Injection Vulnerabilites

Aria-Security's Research Team>
#<www.Aria-Security.Com For further help>
#Original Advisory at:
#http://www.aria-security.com/forum/showthread.php?t=37
#-----------------------------------------
#
#Software: gNews Publisher
#Vendor: http://gazatem.com
#Method: SQL Injection
#
#Poc:
#
#http://target/categories.asp?catID=[SQL Injection]
#http://target/categories.asp?editorID=[SQL Injection]
#
#Contact Us:
#Advisory@Aria-Security.net