BugTraq
Back to list
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
FlexCustomer <= 0.0.4 sql injection
May 06 2006 12:54PM
zerogue gmail com
FlexCustomer <= 0.0.4 sql injection
Discovered by: Nomenumbra
Date: 6/4/2006
impact:high (privilege escalation,defacement)
FlexCustomer versions 0.0.4 and below are vulnerable to and SQL injection in the common user and admin-panel
login as follows (it really is SQL-injection 101 you know.....
[ more ]
Privacy Statement
Copyright 2010, SecurityFocus
Discovered by: Nomenumbra
Date: 6/4/2006
impact:high (privilege escalation,defacement)
FlexCustomer versions 0.0.4 and below are vulnerable to and SQL injection in the common user and admin-panel
login as follows (it really is SQL-injection 101 you know.....
[ more ]