Re: dvddb-0.6 media sql-inj. vuln.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Subject: Re: dvddb-0.6 media sql-inj. vuln.
From: str0ke <str0ke@xxxxxxxxxxx>
Date: Mon, 5 Feb 2007 11:10:15 -0600
Cc: bugtraq@xxxxxxxxxxxxxxxxx
In-reply-to: <20070204224355.27923.qmail@xxxxxxxxxxxxxxxxx>
References: <20070204224355.27923.qmail@xxxxxxxxxxxxxxxxx>
Sender: milw0rm@xxxxxxxxx

On 4 Feb 2007 22:43:55 -0000, gokhankaya@xxxxxxxxxxx
<gokhankaya@xxxxxxxxxxx> wrote:

# ExpLoit       : http://[target]/[path]/inc/common.php?user=[sql]


inc/common.php only contains functions that are never called.

/str0ke

References:
- dvddb-0.6 media sql-inj. vuln.
  - From: gokhankaya

Prev by Date: Les News v2.2 [Admin news without password]
Next by Date: rPSA-2007-0023-1 tshark wireshark
Previous by thread: dvddb-0.6 media sql-inj. vuln.
Next by thread: Re: dvddb-0.6 media sql-inj. vuln.
Index(es):
- Date
- Thread

[Index of Archives] [Linux Security] [Netfilter] [PHP] [Yosemite News] [Linux Kernel]

Powered by Linux