Bugtraq mailing list archives

2 SQL Injection in Fantastic News

From: S3ude () Hotmail com
Date: 26 Feb 2006 21:13:37 -0000

Software: Fantastic News 
Web Site: http://www.fscripts.com
Versions: 2.1.1
Type: 2 SQL Injection 
Class: Remote

Exploit :

1-

http://www.target.com/news.php?action=news&category=|sql

2-

http://www.target.com/news.php?page=|sql


Discovered by: SAUDI

L-G-H Team

http://www.lezr.com

Regards ///

Current thread:

2 SQL Injection in Fantastic News S3ude (Feb 27)