Xpression News 1.0.1 (archives.php) Remote File Disclosure Exploit

Exploit for unknown platform in category web applications ================================================================== Xpression News 1.0.1 archives.php Remote File Disclosure Exploit ================================================================== r0ut3r Presents... Another r0ut3r...

CVE-2007-0569

CVE-2007-0569 describes a SQL injection in the xNews.php component of xNews 1.3 that allows remote attackers to execute arbitrary SQL commands via the id parameter in a shownews action. The vulnerability enables database query manipulation and potential data exposure or manipulation from unauthen...

xNews 1.3 - xNews.php SQL Injection

xNews 1.3 - xNews.php SQL Injection Title : xNews 1.3 xNews.php Remote Blind SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.x-dev.de $$ : Free SQL--------------------------------------------------------- http://target/path//xNews.php?act=shownews&id=SQL Example:...