BlackNova Traders SQL Injection Vulnerability

# Exploit Title: BlackNova Traders (SQL Injection) Vulnerability
# Date          : 2/14/2013 
# Author        : ITTIHACK
# Home          : http://ittihack.com
# Vendor        : http://blacknova.net/
# Download      : http://sourceforge.net/projects/blacknova/ 
# Version       : 0.663
# Category      : webapps
# Google dork   : intext:"Copyright 2000-2005 Ron Harwood and L. Patrick Smallwood"
# Tested on     : Windows 7

# Description   :

                 BlackNova Traders is a web-based, multi-player space exploration game inspired by the
                 popular BBS game of TradeWars. It is coded using PHP, SQL, and Javascript.
				 
#Vulnerable file: news.php

# Demo site     : http://www.lump.dk/bnt/news.php?startdate=2013/02/15
                  http://directcomputerbuilders.com/bnt/news.php?startdate=2013/02/11
			      http://www.armastusesaal.org/blacknova/news.php?startdate=2013/02/15
			      http://www.directorycentral.com/bnt/news.php?startdate=2013/02/15
			      http://www.itburnswhenipee.com/blacknova/news.php?startdate=2013/02/15

#  0day.today [2018-01-10]  #