sql injection in PHPcafe.net Tutorial Manager v1.0 Beta 2

forum type : PHPcafe.net Tutorial Manager v1.0 Beta 2

bug found by : black-code&sweet-devil

team : site-down

type : Sql injection

code:

http://www.xxx.com/path/index.php?lang=0&CODE=1&id=[sql]

path to admin login:

http://www.xxx.com/pth/admin

All my respect to my friend sweet-devil , lezr.com , g123g.net ..

done .. peace

[ reply ]