Bugtraq mailing list archives
SQL injection in phpWebThing 1.4.4
From: A.1.M () Hotmail com
Date: 11 Nov 2005 11:45:49 -0000
Vulnerable: phpWebThings 1.4.4 website : http://phpwebthings.org The bug in download.php ThE Exploit : http://www.target.com/download.php?file=|SQL ThE Error: You have an error in your SQL syntax. Check the manual that corresponds to your MySQL server version for the right syntax to use near 'order by date DESC' at line 1 AhLaM http://www.lezr.com/vb Best Regards ,,,
Current thread:
- SQL injection in phpWebThing 1.4.4 A . 1 . M (Nov 14)