The_Arhitect Posted January 19, 2012 Report Posted January 19, 2012 PhpBridges Blog System members.php SQL Injection# Exploit Title: PhpBridges Blog System SQL Injection Vulnerability# Date: 18/01/2012 - 04.19# Author: 3spi0n# Software Website: https://launchpad.net/phpbridges# Tested On: BackTrack 5 - Win7 Ultimate# Platform: Php>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>[$] Vulnerable File:[~] members.php[$] Demo Sites:[~] server/members.php?id=2" [SQL Injection]>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>># Dar bi Koridor Benimki, Kendimi Aradigim.>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>># Contact: Twitter.Com/RigidusCO - Facebook.Com/3spi0ne>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>- Mr.PaPaRoSSe And 3spi0n -Bug Researcher Group - TURKEY>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>Sursa: PhpBridges Blog System members.php SQL Injection Quote