sql injection in PHPcafe.net Tutorial Manager

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: sql injection in PHPcafe.net Tutorial Manager
From: black-cod3@xxxxxxxxxxx
Date: 27 May 2006 11:07:55 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

sql injection in PHPcafe.net Tutorial Manager v1.0 Beta 2 

forum type : PHPcafe.net Tutorial Manager v1.0 Beta 2
bug found by : black-code&sweet-devil
team : site-down
type : Sql injection

code:

http://www.xxx.com/path/index.php?lang=0&CODE=1&id=[sql]


path to admin login:

http://www.xxx.com/pth/admin

All my respect to my friend sweet-devil , lezr.com , g123g.net ..

done .. peace

Prev by Date: Multiple Xss exploits in ar-blog v 5.2
Next by Date: RE: LM hashes in a hot-desking environment
Previous by thread: Multiple Xss exploits in ar-blog v 5.2
Next by thread: Speedy ASP Forum(profileupdate.asp) User Pass Change Exploit
Index(es):
- Date
- Thread