Bugtraq mailing list archives

Re: modules name(Sections)SQL Injection Exploit


From: security curmudgeon <jericho () attrition org>
Date: Sun, 21 May 2006 21:43:24 -0400 (EDT)


: ********************
: By: Mr-X
: Email: Mster-X () hotmail com
: Subject: modules name(Sections)SQL Injection 
: ********************
: 
: example:-
: /modules.php?name=Surveys&op=results&pollID=8&mode=&order=&thold=[SQL]

What product is this in? Searching for "modules name sections" is not that 
helpful.


Current thread: