BugTraq
Mini-Nuke<=1.8.2 SQL injection (6) Mar 21 2006 10:22PM
dabdoub_mosikar forislam com
//mini-nuke board turk have many sql injection founded by Moroccan Security
Team
//Creetz to: Moroccan Security Team
[Dr.E-vil,Dr.Erase,H0550N,|ucifer,DaBDouB-MoSiKaR [OverclockiX],ki11er]
,Dranzelz,Esp!onLeRaVaGe,ameer,www.lezr.com and all muslim [morocco]
[1]
http://[target]/members.asp?action=member_details&uid=|sql|
[2]
http://[target]/articles.asp?action=articles&catid=|sql|
[3]
http://[target]/hpages.asp?id=|sql|
[4]
http://[target]/programs.asp?action=programs&catid=|sql|
[5]
http://[target]/forum.asp?action=Topics&id=|sql|
[6]
http://[target]/pages.asp?id=|sql|
/////////////////////////////////////////////////////////////////
Help table name

Columns of members
sifre=password md5
uye_id = userid
g_soru = secret question.
g_cevap = secret answer
email = mail address
isim = name
//////////////////////////////////////////////////////////////////

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus