<<< Date Index >>>     <<< Thread Index >>>

2 SQL Injection in Fantastic News



Software: Fantastic News 
Web Site: http://www.fscripts.com
Versions: 2.1.1
Type: 2 SQL Injection 
Class: Remote

Exploit :

1-

http://www.target.com/news.php?action=news&category=|sql

2-

http://www.target.com/news.php?page=|sql


Discovered by: SAUDI

L-G-H Team

http://www.lezr.com

Regards ///