Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
BlogPHP config.php SQL injection login bypass Jan 20 2006 07:17PM
addmimistrator gmail com
SELECT level,email,url FROM ".$pre."users WHERE username = '".$_COOKIE[blogphp_username]."' AND password = '".$_COOKIE[blogphp_password]."'"

--------------------Summary----------------

Software: BlogPHP
Sowtware's Web Site: http://www.blogphp.net/
Versions: 1(2)
Type: SQL Injection
Class: Remote
S...

[ more ]  




 

Privacy Statement
Copyright 2009, SecurityFocus