Full Disclosure mailing list archives

Re: Knorr.de SQL Injection and XSS Vulnerabilities

From: "Lolek of TK53" <lolek1337 () googlemail com>
Date: Sun, 4 Mar 2007 14:45:46 +0100

Hi,
On 3/2/07, sbauer () gjl-network net <sbauer () gjl-network net> wrote:

Author: Sebastian Bauer
Web: http://blog.gjl-network.net
Date: 01/12/07

Vuln. website: http://www.knorr.de
Vulnerability: SQL Injection (mainly login authentication bypass + any
other SQL inj.
possibility), XSS
Significance: Very Critical


OMFG who cares.....

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread:

Knorr.de SQL Injection and XSS Vulnerabilities sbauer (Mar 02)
- Re: Knorr.de SQL Injection and XSS Vulnerabilities Knud Erik Højgaard (Mar 02)
  - Re: Knorr.de SQL Injection and XSS Vulnerabilities Sebastian Bauer (Mar 02)
  - Re: Knorr.de SQL Injection and XSS Vulnerabilities Joe Hancock (Mar 02)
  - Re: Knorr.de SQL Injection and XSS Vulnerabilities Michal Zalewski (Mar 02)
- Re: Knorr.de SQL Injection and XSS Vulnerabilities Lolek of TK53 (Mar 04)
  - Re: Knorr.de SQL Injection and XSS Vulnerabilities poo (Mar 05)