OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
2 SQL Injection in Fantastic News

S3udeHotmail.com
Date: Sun Feb 26 2006 - 15:13:37 CST


Software: Fantastic News
Web Site: http://www.fscripts.com
Versions: 2.1.1
Type: 2 SQL Injection
Class: Remote

Exploit :

1-

http://www.target.com/news.php?action=news&category=|sql

2-

http://www.target.com/news.php?page=|sql

Discovered by: SAUDI

L-G-H Team

http://www.lezr.com

Regards ///