Possible Fixes: The usage of htmlspeacialchars(), mysql_escape_string(), mysql_real_escape_string() and other functions for input validation before passing user input to the mysql database, or before echoing data on the screen, would solve these problems.
Keep your self updated, Rss feed at: http://digitalparadox.org/rss.ah
Author:
These vulnerabilties have been found and released by Diabolic Crab, Email: dcrab[AT|NOSPAM]hackerscenter[DOT|NOSPAM]com, please feel free to contact me regarding these vulnerabilities. You can find me at, http://www.hackerscenter.com or http://digitalparadox.org/. Lookout for my soon to come out book on Secure coding with php.
Dcrab 's Security Advisory
[Hsc Security Group] http://www.hackerscenter.com/
[dP Security] http://digitalparadox.org/
Get Dcrab's Services to audit your Web servers, scripts, networks, etc. Learn more at http://www.digitalparadox.org/services.ah
Severity: Very High
Title: DUportal Pro 3.4 has MANY Sql injection and Sql Errors.
Date: 20/04/2005
Vendor: DUware
Vendor Website: http://www.duware.com/
Summary: There are, many sql injections and sql errors on duportal pro 3.4.
Proof of Concept Exploits:
THESE ARE ALL SQL INJECTIONS
http://localhost/dUpro/Businesses/../Articles/default.asp?iChannel=2&nCh
annel='SQL_INJECTION
http://localhost/dUpro/Businesses/../Articles/default.asp?iChannel='SQL_
INJECTION&nChannel=Articles
http://localhost/dUpro/Businesses/../Businesses/default.asp?iChannel=18&
nChannel='SQL_INJECTION
http://localhost/dUpro/Businesses/../Businesses/default.asp?iChannel='SQ
L_INJECTION&nChannel=Businesses
http://localhost/dUpro/Businesses/../Classifieds/default.asp?iChannel=7&
nChannel='SQL_INJECTION
http://localhost/dUpro/Businesses/../Classifieds/default.asp?iChannel='S
QL_INJECTION&nChannel=Classifieds
http://localhost/dUpro/Businesses/../Entertainments/default.asp?iChannel
=19&nChannel='SQL_INJECTION
http://localhost/dUpro/Businesses/../Entertainments/default.asp?iChannel
='SQL_INJECTION&nChannel=Entertainments
http://localhost/dUpro/Businesses/../Events/default.asp?iChannel=6&nChan
nel='SQL_INJECTION
http://localhost/dUpro/Businesses/../events/default.asp?iChannel=6&nChan
nel='SQL_INJECTION&iDate=4%2f1%2f2005
http://localhost/dUpro/Businesses/../Events/default.asp?iChannel='SQL_IN
JECTION&nChannel=Events
http://localhost/dUpro/Businesses/../events/default.asp?iChannel='SQL_IN
JECTION&nChannel=Events&iDate=4%2f1%2f2005
http://localhost/dUpro/Businesses/../Files/default.asp?iChannel=4&nChann
el='SQL_INJECTION
http://localhost/dUpro/Businesses/../Files/default.asp?iChannel='SQL_INJ
ECTION&nChannel=Files
http://localhost/dUpro/Businesses/../home/search.asp?keyword=dcrab&iChan
nel='SQL_INJECTION
http://localhost/dUpro/Businesses/../Links/default.asp?iChannel=5&nChann
el='SQL_INJECTION
http://localhost/dUpro/Businesses/../Links/default.asp?iChannel='SQL_INJ
ECTION&nChannel=Links
http://localhost/dUpro/Businesses/../Pictures/default.asp?iChannel=3&nCh
annel='SQL_INJECTION
http://localhost/dUpro/Businesses/../Pictures/default.asp?iChannel='SQL_
INJECTION&nChannel=Pictures
http://localhost/dUpro/Businesses/../Pictures/detail.asp?iData=53&iCat=5
10&iChannel=3&nChannel='SQL_INJECTION
http://localhost/dUpro/Businesses/../Pictures/detail.asp?iData=53&iCat=5
10&iChannel='SQL_INJECTION&nChannel=Pictures
http://localhost/dUpro/Businesses/../Pictures/detail.asp?iData=53&iCat='
SQL_INJECTION&iChannel=3&nChannel=Pictures
http://localhost/dUpro/Businesses/../Pictures/detail.asp?iData='SQL_INJE
CTION&iCat=510&iChannel=3&nChannel=Pictures
http://localhost/dUpro/Businesses/../Polls/default.asp?iChannel=15&nChan
nel='SQL_INJECTION
http://localhost/dUpro/Businesses/../Polls/default.asp?iChannel='SQL_INJ
ECTION&nChannel=Polls
http://localhost/dUpro/Businesses/../polls/inc_vote.asp?POL_PARENT=74&PO
L_CATEGORY=254&CHA_ID=15&CHA_NAME='SQL_INJECTION&POL_ID=76&POL_ID=77&POL
_ID=75
http://localhost/dUpro/Businesses/../polls/inc_vote.asp?POL_PARENT=74&PO
L_CATEGORY=254&CHA_ID=15&CHA_NAME=Polls&POL_ID=76&POL_ID=77&POL_ID='SQL_
INJECTION
http://localhost/dUpro/Businesses/../polls/inc_vote.asp?POL_PARENT=74&PO
L_CATEGORY=254&CHA_ID=15&CHA_NAME=Polls&POL_ID=76&POL_ID='SQL_INJECTION&
POL_ID=75
http://localhost/dUpro/Businesses/../polls/inc_vote.asp?POL_PARENT=74&PO
L_CATEGORY=254&CHA_ID=15&CHA_NAME=Polls&POL_ID='SQL_INJECTION&POL_ID=77&
POL_ID=75
http://localhost/dUpro/Businesses/../polls/inc_vote.asp?POL_PARENT=74&PO
L_CATEGORY=254&CHA_ID='SQL_INJECTION&CHA_NAME=Polls&POL_ID=76&POL_ID=77&
POL_ID=75
http://localhost/dUpro/Businesses/../polls/inc_vote.asp?POL_PARENT=74&PO
L_CATEGORY='SQL_INJECTION&CHA_ID=15&CHA_NAME=Polls&POL_ID=76&POL_ID=77&P
OL_ID=75
http://localhost/dUpro/Businesses/../polls/inc_vote.asp?POL_PARENT='SQL_
INJECTION&POL_CATEGORY=254&CHA_ID=15&CHA_NAME=Polls&POL_ID=76&POL_ID=77&
POL_ID=75
http://localhost/dUpro/Businesses/../polls/result.asp?iData=74&iCat=254&
iChannel='SQL_INJECTION&nChannel=Polls
http://localhost/dUpro/Businesses/../polls/result.asp?iData='SQL_INJECTI
ON&iCat=254&iChannel=15&nChannel=Polls
http://localhost/dUpro/Businesses/../Products/default.asp?iChannel=8&nCh
annel='SQL_INJECTION
http://localhost/dUpro/Businesses/../Products/default.asp?iChannel='SQL_
INJECTION&nChannel=Products
http://localhost/dUpro/Businesses/../Topics/default.asp?iChannel='SQL_IN
JECTION&nChannel=Topics
http://localhost/dUpro/Businesses/cat.asp?iCat=548&iChannel=18&nChannel=
'SQL_INJECTION
http://localhost/dUpro/Businesses/cat.asp?iCat=548&iChannel='SQL_INJECTI
ON&nChannel=Businesses
http://localhost/dUpro/Businesses/cat.asp?iCat='SQL_INJECTION&iChannel=1
8&nChannel=Businesses
http://localhost/dUpro/Businesses/default.asp?iChannel=18&nChannel='SQL_
INJECTION
http://localhost/dUpro/Businesses/default.asp?iChannel='SQL_INJECTION&nC
hannel=Businesses
http://localhost/dUpro/Businesses/detail.asp?iData=1&iCat=563&iChannel=1
8&nChannel='SQL_INJECTION
http://localhost/dUpro/Businesses/detail.asp?iData=1&iCat=563&iChannel='
SQL_INJECTION&nChannel=Businesses
http://localhost/dUpro/Businesses/detail.asp?iData='SQL_INJECTION&iCat=5
63&iChannel=18&nChannel=Businesses
http://localhost/dUpro/Classifieds/../Articles/default.asp?iChannel=2&nC
hannel='SQL_INJECTION
http://localhost/dUpro/Classifieds/../Articles/default.asp?iChannel='SQL
_INJECTION&nChannel=Articles
http://localhost/dUpro/Classifieds/../Businesses/default.asp?iChannel=18
&nChannel='SQL_INJECTION
http://localhost/dUpro/Classifieds/../Businesses/default.asp?iChannel='S
QL_INJECTION&nChannel=Businesses
http://localhost/dUpro/Classifieds/../Classifieds/default.asp?iChannel=7
&nChannel='SQL_INJECTION
http://localhost/dUpro/Classifieds/../Classifieds/default.asp?iChannel='
SQL_INJECTION&nChannel=Classifieds
http://localhost/dUpro/Classifieds/../Entertainments/default.asp?iChanne
l=19&nChannel='SQL_INJECTION
http://localhost/dUpro/Classifieds/../Entertainments/default.asp?iChanne
l='SQL_INJECTION&nChannel=Entertainments
http://localhost/dUpro/Classifieds/../Events/default.asp?iChannel=6&nCha
nnel='SQL_INJECTION
http://localhost/dUpro/Classifieds/../events/default.asp?iChannel=6&nCha
nnel='SQL_INJECTION&iDate=4%2f1%2f2005
http://localhost/dUpro/Classifieds/../Events/default.asp?iChannel='SQL_I
NJECTION&nChannel=Events
http://localhost/dUpro/Classifieds/../events/default.asp?iChannel='SQL_I
NJECTION&nChannel=Events&iDate=4%2f1%2f2005
http://localhost/dUpro/Classifieds/../Files/default.asp?iChannel=4&nChan
nel='SQL_INJECTION
http://localhost/dUpro/Classifieds/../Files/default.asp?iChannel='SQL_IN
JECTION&nChannel=Files
http://localhost/dUpro/Classifieds/../home/search.asp?keyword=dcrab&iCha
nnel='SQL_INJECTION
http://localhost/dUpro/Classifieds/../Links/default.asp?iChannel=5&nChan
nel='SQL_INJECTION
http://localhost/dUpro/Classifieds/../Links/default.asp?iChannel='SQL_IN
JECTION&nChannel=Links
http://localhost/dUpro/Classifieds/../News/default.asp?iChannel=1&nChann
el='SQL_INJECTION
http://localhost/dUpro/Classifieds/../News/default.asp?iChannel='SQL_INJ
ECTION&nChannel=News
http://localhost/dUpro/Classifieds/../Pictures/default.asp?iChannel=3&nC
hannel='SQL_INJECTION
http://localhost/dUpro/Classifieds/../Pictures/default.asp?iChannel='SQL
_INJECTION&nChannel=Pictures
http://localhost/dUpro/Classifieds/../Pictures/detail.asp?iData=3&iCat=5
20&iChannel=3&nChannel='SQL_INJECTION
http://localhost/dUpro/Classifieds/../Pictures/detail.asp?iData=3&iCat=5
20&iChannel='SQL_INJECTION&nChannel=Pictures
http://localhost/dUpro/Classifieds/../Pictures/detail.asp?iData=3&iCat='
SQL_INJECTION&iChannel=3&nChannel=Pictures
http://localhost/dUpro/Classifieds/../Pictures/detail.asp?iData='SQL_INJ
ECTION&iCat=520&iChannel=3&nChannel=Pictures
http://localhost/dUpro/Classifieds/../Polls/default.asp?iChannel=15&nCha
nnel='SQL_INJECTION
http://localhost/dUpro/Classifieds/../Polls/default.asp?iChannel='SQL_IN
JECTION&nChannel=Polls
http://localhost/dUpro/Classifieds/../polls/inc_vote.asp?POL_PARENT='SQL
_INJECTION&POL_CATEGORY=254&CHA_ID=15&CHA_NAME=Polls&POL_ID=76&POL_ID=77
&POL_ID=75
http://localhost/dUpro/Classifieds/../polls/result.asp?iData=74&iCat=254
&iChannel='SQL_INJECTION&nChannel=Polls
http://localhost/dUpro/Classifieds/../polls/result.asp?iData='SQL_INJECT
ION&iCat=254&iChannel=15&nChannel=Polls
http://localhost/dUpro/Classifieds/../Products/default.asp?iChannel=8&nC
hannel='SQL_INJECTION
http://localhost/dUpro/Classifieds/../Products/default.asp?iChannel='SQL
_INJECTION&nChannel=Products
http://localhost/dUpro/Classifieds/../Topics/default.asp?iChannel='SQL_I
NJECTION&nChannel=Topics
http://localhost/dUpro/Classifieds/cat.asp?iCat=218&iChannel=7&nChannel=
'SQL_INJECTION
http://localhost/dUpro/Classifieds/cat.asp?iCat=218&iChannel='SQL_INJECT
ION&nChannel=Classifieds
http://localhost/dUpro/Classifieds/cat.asp?iCat='SQL_INJECTION&iChannel=
7&nChannel=Classifieds
http://localhost/dUpro/Classifieds/default.asp?iChannel=7&nChannel='SQL_
INJECTION
http://localhost/dUpro/Classifieds/default.asp?iChannel='SQL_INJECTION&n
Channel=Classifieds
http://localhost/dUpro/Classifieds/detail.asp?iData=14&iCat=351&iChannel
=7&nChannel='SQL_INJECTION
http://localhost/dUpro/Classifieds/detail.asp?iData=14&iCat=351&iChannel
='SQL_INJECTION&nChannel=Classifieds
http://localhost/dUpro/Classifieds/detail.asp?iData='SQL_INJECTION&iCat=
351&iChannel=7&nChannel=Classifieds
http://localhost/dUpro/Events/../Articles/default.asp?iChannel=2&nChanne
l='SQL_INJECTION
http://localhost/dUpro/events/../Articles/default.asp?iChannel=2&nChanne
l='SQL_INJECTION
http://localhost/dUpro/Events/../Articles/default.asp?iChannel='SQL_INJE
CTION&nChannel=Articles
http://localhost/dUpro/events/../Articles/default.asp?iChannel='SQL_INJE
CTION&nChannel=Articles
http://localhost/dUpro/Events/../Businesses/default.asp?iChannel=18&nCha
nnel='SQL_INJECTION
http://localhost/dUpro/events/../Businesses/default.asp?iChannel=18&nCha
nnel='SQL_INJECTION
http://localhost/dUpro/Events/../Businesses/default.asp?iChannel='SQL_IN
JECTION&nChannel=Businesses
http://localhost/dUpro/events/../Businesses/default.asp?iChannel='SQL_IN
JECTION&nChannel=Businesses
http://localhost/dUpro/Events/../Classifieds/default.asp?iChannel=7&nCha
nnel='SQL_INJECTION
http://localhost/dUpro/events/../Classifieds/default.asp?iChannel=7&nCha
nnel='SQL_INJECTION
http://localhost/dUpro/Events/../Classifieds/default.asp?iChannel='SQL_I
NJECTION&nChannel=Classifieds
http://localhost/dUpro/events/../Classifieds/default.asp?iChannel='SQL_I
NJECTION&nChannel=Classifieds
http://localhost/dUpro/Events/../Entertainments/default.asp?iChannel=19&
nChannel='SQL_INJECTION
http://localhost/dUpro/events/../Entertainments/default.asp?iChannel=19&
nChannel='SQL_INJECTION
http://localhost/dUpro/Events/../Entertainments/default.asp?iChannel='SQ
L_INJECTION&nChannel=Entertainments
http://localhost/dUpro/events/../Entertainments/default.asp?iChannel='SQ
L_INJECTION&nChannel=Entertainments
http://localhost/dUpro/Events/../events/default.asp?iChannel=6&iDate=3%2
f19%2f2005&nChannel='SQL_INJECTION
http://localhost/dUpro/events/../events/default.asp?iChannel=6&iDate=3%2
f19%2f2005&nChannel='SQL_INJECTION
http://localhost/dUpro/Events/../Events/default.asp?iChannel=6&nChannel=
'SQL_INJECTION
http://localhost/dUpro/events/../Events/default.asp?iChannel=6&nChannel=
'SQL_INJECTION
http://localhost/dUpro/Events/../events/default.asp?iChannel='SQL_INJECT
ION&iDate=3%2f19%2f2005&nChannel=Events
http://localhost/dUpro/events/../events/default.asp?iChannel='SQL_INJECT
ION&iDate=3%2f19%2f2005&nChannel=Events
http://localhost/dUpro/Events/../Events/default.asp?iChannel='SQL_INJECT
ION&nChannel=Events
http://localhost/dUpro/events/../Events/default.asp?iChannel='SQL_INJECT
ION&nChannel=Events
http://localhost/dUpro/Events/../events/detail.asp?iData=5&iCat=327&iCha
nnel=6&nChannel='SQL_INJECTION
http://localhost/dUpro/events/../events/detail.asp?iData=5&iCat=327&iCha
nnel=6&nChannel='SQL_INJECTION
http://localhost/dUpro/Events/../events/detail.asp?iData=5&iCat=327&iCha
nnel='SQL_INJECTION&nChannel=Events
http://localhost/dUpro/events/../events/detail.asp?iData=5&iCat=327&iCha
nnel='SQL_INJECTION&nChannel=Events
http://localhost/dUpro/Events/../events/detail.asp?iData='SQL_INJECTION&
iCat=327&iChannel=6&nChannel=Events
http://localhost/dUpro/events/../events/detail.asp?iData='SQL_INJECTION&
iCat=327&iChannel=6&nChannel=Events
http://localhost/dUpro/Events/../Files/default.asp?iChannel=4&nChannel='
SQL_INJECTION
http://localhost/dUpro/events/../Files/default.asp?iChannel=4&nChannel='
SQL_INJECTION
http://localhost/dUpro/Events/../Files/default.asp?iChannel='SQL_INJECTI
ON&nChannel=Files
http://localhost/dUpro/events/../Files/default.asp?iChannel='SQL_INJECTI
ON&nChannel=Files
http://localhost/dUpro/Events/../home/search.asp?keyword=dcrab&iChannel=
'SQL_INJECTION
http://localhost/dUpro/events/../home/search.asp?keyword=dcrab&iChannel=
'SQL_INJECTION
http://localhost/dUpro/Events/../Links/default.asp?iChannel=5&nChannel='
SQL_INJECTION
http://localhost/dUpro/events/../Links/default.asp?iChannel=5&nChannel='
SQL_INJECTION
http://localhost/dUpro/Events/../Links/default.asp?iChannel='SQL_INJECTI
ON&nChannel=Links
http://localhost/dUpro/events/../Links/default.asp?iChannel='SQL_INJECTI
ON&nChannel=Links
http://localhost/dUpro/Events/../News/default.asp?iChannel=1&nChannel='S
QL_INJECTION
http://localhost/dUpro/events/../News/default.asp?iChannel=1&nChannel='S
QL_INJECTION
http://localhost/dUpro/Events/../News/default.asp?iChannel='SQL_INJECTIO
N&nChannel=News
http://localhost/dUpro/events/../News/default.asp?iChannel='SQL_INJECTIO
N&nChannel=News
http://localhost/dUpro/Events/../Pictures/default.asp?iChannel=3&nChanne
l='SQL_INJECTION
http://localhost/dUpro/events/../Pictures/default.asp?iChannel=3&nChanne
l='SQL_INJECTION
http://localhost/dUpro/Events/../Pictures/default.asp?iChannel='SQL_INJE
CTION&nChannel=Pictures
http://localhost/dUpro/events/../Pictures/default.asp?iChannel='SQL_INJE
CTION&nChannel=Pictures
http://localhost/dUpro/events/../Pictures/detail.asp?iData=49&iCat=505&i
Channel=3&nChannel='SQL_INJECTION
http://localhost/dUpro/events/../Pictures/detail.asp?iData=49&iCat=505&i
Channel='SQL_INJECTION&nChannel=Pictures
http://localhost/dUpro/events/../Pictures/detail.asp?iData=49&iCat='SQL_
INJECTION&iChannel=3&nChannel=Pictures
http://localhost/dUpro/Events/../Pictures/detail.asp?iData=5&iCat=520&iC
hannel=3&nChannel='SQL_INJECTION
http://localhost/dUpro/Events/../Pictures/detail.asp?iData=5&iCat=520&iC
hannel='SQL_INJECTION&nChannel=Pictures
http://localhost/dUpro/Events/../Pictures/detail.asp?iData=5&iCat='SQL_I
NJECTION&iChannel=3&nChannel=Pictures
http://localhost/dUpro/events/../Pictures/detail.asp?iData='SQL_INJECTIO
N&iCat=505&iChannel=3&nChannel=Pictures
http://localhost/dUpro/Events/../Pictures/detail.asp?iData='SQL_INJECTIO
N&iCat=520&iChannel=3&nChannel=Pictures
http://localhost/dUpro/Events/../Polls/default.asp?iChannel=15&nChannel=
'SQL_INJECTION
http://localhost/dUpro/events/../Polls/default.asp?iChannel=15&nChannel=
'SQL_INJECTION
http://localhost/dUpro/Events/../Polls/default.asp?iChannel='SQL_INJECTI
ON&nChannel=Polls
http://localhost/dUpro/events/../Polls/default.asp?iChannel='SQL_INJECTI
ON&nChannel=Polls
http://localhost/dUpro/Events/../polls/inc_vote.asp?POL_PARENT=74&POL_CA
TEGORY=254&CHA_ID=15&CHA_NAME='SQL_INJECTION&POL_ID=76&POL_ID=77&POL_ID=
75
http://localhost/dUpro/events/../polls/inc_vote.asp?POL_PARENT=74&POL_CA
TEGORY=254&CHA_ID=15&CHA_NAME='SQL_INJECTION&POL_ID=76&POL_ID=77&POL_ID=
75
http://localhost/dUpro/Events/../polls/inc_vote.asp?POL_PARENT=74&POL_CA
TEGORY=254&CHA_ID=15&CHA_NAME=Polls&POL_ID=76&POL_ID=77&POL_ID='SQL_INJE
CTION
http://localhost/dUpro/events/../polls/inc_vote.asp?POL_PARENT=74&POL_CA
TEGORY=254&CHA_ID=15&CHA_NAME=Polls&POL_ID=76&POL_ID=77&POL_ID='SQL_INJE
CTION
http://localhost/dUpro/Events/../polls/inc_vote.asp?POL_PARENT=74&POL_CA
TEGORY=254&CHA_ID=15&CHA_NAME=Polls&POL_ID=76&POL_ID='SQL_INJECTION&POL_
ID=75
http://localhost/dUpro/events/../polls/inc_vote.asp?POL_PARENT=74&POL_CA
TEGORY=254&CHA_ID=15&CHA_NAME=Polls&POL_ID=76&POL_ID='SQL_INJECTION&POL_
ID=75
http://localhost/dUpro/Events/../polls/inc_vote.asp?POL_PARENT=74&POL_CA
TEGORY=254&CHA_ID=15&CHA_NAME=Polls&POL_ID='SQL_INJECTION&POL_ID=77&POL_
ID=75
http://localhost/dUpro/events/../polls/inc_vote.asp?POL_PARENT=74&POL_CA
TEGORY=254&CHA_ID=15&CHA_NAME=Polls&POL_ID='SQL_INJECTION&POL_ID=77&POL_
ID=75
http://localhost/dUpro/Events/../polls/inc_vote.asp?POL_PARENT=74&POL_CA
TEGORY=254&CHA_ID='SQL_INJECTION&CHA_NAME=Polls&POL_ID=76&POL_ID=77&POL_
ID=75
http://localhost/dUpro/events/../polls/inc_vote.asp?POL_PARENT=74&POL_CA
TEGORY=254&CHA_ID='SQL_INJECTION&CHA_NAME=Polls&POL_ID=76&POL_ID=77&POL_
ID=75
http://localhost/dUpro/Events/../polls/inc_vote.asp?POL_PARENT=74&POL_CA
TEGORY='SQL_INJECTION&CHA_ID=15&CHA_NAME=Polls&POL_ID=76&POL_ID=77&POL_I
D=75
http://localhost/dUpro/events/../polls/inc_vote.asp?POL_PARENT=74&POL_CA
TEGORY='SQL_INJECTION&CHA_ID=15&CHA_NAME=Polls&POL_ID=76&POL_ID=77&POL_I
D=75
http://localhost/dUpro/Events/../polls/inc_vote.asp?POL_PARENT='SQL_INJE
CTION&POL_CATEGORY=254&CHA_ID=15&CHA_NAME=Polls&POL_ID=76&POL_ID=77&POL_
ID=75
http://localhost/dUpro/events/../polls/inc_vote.asp?POL_PARENT='SQL_INJE
CTION&POL_CATEGORY=254&CHA_ID=15&CHA_NAME=Polls&POL_ID=76&POL_ID=77&POL_
ID=75
http://localhost/dUpro/Events/../polls/result.asp?iData=74&iCat=254&iCha
nnel='SQL_INJECTION&nChannel=Polls
http://localhost/dUpro/events/../polls/result.asp?iData=74&iCat=254&iCha
nnel='SQL_INJECTION&nChannel=Polls
http://localhost/dUpro/Events/../polls/result.asp?iData='SQL_INJECTION&i
Cat=254&iChannel=15&nChannel=Polls
http://localhost/dUpro/events/../polls/result.asp?iData='SQL_INJECTION&i
Cat=254&iChannel=15&nChannel=Polls
http://localhost/dUpro/Events/../Products/default.asp?iChannel=8&nChanne
l='SQL_INJECTION
http://localhost/dUpro/events/../Products/default.asp?iChannel=8&nChanne
l='SQL_INJECTION
http://localhost/dUpro/Events/../Products/default.asp?iChannel='SQL_INJE
CTION&nChannel=Products
http://localhost/dUpro/events/../Products/default.asp?iChannel='SQL_INJE
CTION&nChannel=Products
http://localhost/dUpro/Events/../Topics/default.asp?iChannel='SQL_INJECT
ION&nChannel=Topics
http://localhost/dUpro/events/../Topics/default.asp?iChannel='SQL_INJECT
ION&nChannel=Topics
http://localhost/dUpro/Events/cat.asp?iCat=248&iChannel=6&nChannel='SQL_
INJECTION
http://localhost/dUpro/events/cat.asp?iCat=248&iChannel=6&nChannel='SQL_
INJECTION
http://localhost/dUpro/Events/cat.asp?iCat=248&iChannel='SQL_INJECTION&n
Channel=Events
http://localhost/dUpro/events/cat.asp?iCat=248&iChannel='SQL_INJECTION&n
Channel=Events
http://localhost/dUpro/Events/cat.asp?iCat='SQL_INJECTION&iChannel=6&nCh
annel=Events
http://localhost/dUpro/events/cat.asp?iCat='SQL_INJECTION&iChannel=6&nCh
annel=Events
http://localhost/dUpro/Events/default.asp?iChannel=6&nChannel='SQL_INJEC
TION
http://localhost/dUpro/events/default.asp?iChannel=6&nChannel='SQL_INJEC
TION
http://localhost/dUpro/Events/default.asp?iChannel='SQL_INJECTION&nChann
el=Events
http://localhost/dUpro/events/default.asp?iChannel='SQL_INJECTION&nChann
el=Events
http://localhost/dUpro/Files/../Articles/default.asp?iChannel=2&nChannel
='SQL_INJECTION
http://localhost/dUpro/Files/../Articles/default.asp?iChannel='SQL_INJEC
TION&nChannel=Articles
http://localhost/dUpro/Files/../Businesses/default.asp?iChannel=18&nChan
nel='SQL_INJECTION
http://localhost/dUpro/Files/../Businesses/default.asp?iChannel='SQL_INJ
ECTION&nChannel=Businesses
http://localhost/dUpro/Files/../Classifieds/default.asp?iChannel=7&nChan
nel='SQL_INJECTION
http://localhost/dUpro/Files/../Classifieds/default.asp?iChannel='SQL_IN
JECTION&nChannel=Classifieds
http://localhost/dUpro/Files/../Entertainments/default.asp?iChannel=19&n
Channel='SQL_INJECTION
http://localhost/dUpro/Files/../Entertainments/default.asp?iChannel='SQL
_INJECTION&nChannel=Entertainments
http://localhost/dUpro/Files/../Events/default.asp?iChannel=6&nChannel='
SQL_INJECTION
http://localhost/dUpro/Files/../events/default.asp?iChannel=6&nChannel='
SQL_INJECTION&iDate=4%2f1%2f2005
http://localhost/dUpro/Files/../Events/default.asp?iChannel='SQL_INJECTI
ON&nChannel=Events
http://localhost/dUpro/Files/../events/default.asp?iChannel='SQL_INJECTI
ON&nChannel=Events&iDate=4%2f1%2f2005
http://localhost/dUpro/Files/../Files/default.asp?iChannel=4&nChannel='S
QL_INJECTION
http://localhost/dUpro/Files/../Files/default.asp?iChannel='SQL_INJECTIO
N&nChannel=Files
http://localhost/dUpro/Files/../home/search.asp?keyword=dcrab&iChannel='
SQL_INJECTION
http://localhost/dUpro/Files/../Links/default.asp?iChannel=5&nChannel='S
QL_INJECTION
http://localhost/dUpro/Files/../Links/default.asp?iChannel='SQL_INJECTIO
N&nChannel=Links
http://localhost/dUpro/Files/../News/default.asp?iChannel=1&nChannel='SQ
L_INJECTION
http://localhost/dUpro/Files/../News/default.asp?iChannel='SQL_INJECTION
&nChannel=News
http://localhost/dUpro/Files/../Pictures/default.asp?iChannel=3&nChannel
='SQL_INJECTION
http://localhost/dUpro/Files/../Pictures/default.asp?iChannel='SQL_INJEC
TION&nChannel=Pictures
http://localhost/dUpro/Files/../Pictures/detail.asp?iData=8&iCat=206&iCh
annel=3&nChannel='SQL_INJECTION
http://localhost/dUpro/Files/../Pictures/detail.asp?iData=8&iCat=206&iCh
annel='SQL_INJECTION&nChannel=Pictures
http://localhost/dUpro/Files/../Pictures/detail.asp?iData=8&iCat='SQL_IN
JECTION&iChannel=3&nChannel=Pictures
http://localhost/dUpro/Files/../Pictures/detail.asp?iData='SQL_INJECTION
&iCat=206&iChannel=3&nChannel=Pictures
http://localhost/dUpro/Files/../Polls/default.asp?iChannel=15&nChannel='
SQL_INJECTION
http://localhost/dUpro/Files/../Polls/default.asp?iChannel='SQL_INJECTIO
N&nChannel=Polls
http://localhost/dUpro/Files/../polls/inc_vote.asp?POL_PARENT=74&POL_CAT
EGORY=254&CHA_ID=15&CHA_NAME='SQL_INJECTION&POL_ID=76&POL_ID=77&POL_ID=7
5
http://localhost/dUpro/Files/../polls/inc_vote.asp?POL_PARENT=74&POL_CAT
EGORY=254&CHA_ID=15&CHA_NAME=Polls&POL_ID=76&POL_ID=77&POL_ID='SQL_INJEC
TION
http://localhost/dUpro/Files/../polls/inc_vote.asp?POL_PARENT=74&POL_CAT
EGORY=254&CHA_ID=15&CHA_NAME=Polls&POL_ID=76&POL_ID='SQL_INJECTION&POL_I
D=75
http://localhost/dUpro/Files/../polls/inc_vote.asp?POL_PARENT=74&POL_CAT
EGORY=254&CHA_ID=15&CHA_NAME=Polls&POL_ID='SQL_INJECTION&POL_ID=77&POL_I
D=75
http://localhost/dUpro/Files/../polls/inc_vote.asp?POL_PARENT=74&POL_CAT
EGORY=254&CHA_ID='SQL_INJECTION&CHA_NAME=Polls&POL_ID=76&POL_ID=77&POL_I
D=75
http://localhost/dUpro/Files/../polls/inc_vote.asp?POL_PARENT=74&POL_CAT
EGORY='SQL_INJECTION&CHA_ID=15&CHA_NAME=Polls&POL_ID=76&POL_ID=77&POL_ID
=75
http://localhost/dUpro/Files/../polls/inc_vote.asp?POL_PARENT='SQL_INJEC
TION&POL_CATEGORY=254&CHA_ID=15&CHA_NAME=Polls&POL_ID=76&POL_ID=77&POL_I
D=75
http://localhost/dUpro/Files/../polls/result.asp?iData=74&iCat=254&iChan
nel='SQL_INJECTION&nChannel=Polls
http://localhost/dUpro/Files/../polls/result.asp?iData='SQL_INJECTION&iC
at=254&iChannel=15&nChannel=Polls
http://localhost/dUpro/Files/../Products/default.asp?iChannel=8&nChannel
='SQL_INJECTION
http://localhost/dUpro/Files/../Products/default.asp?iChannel='SQL_INJEC
TION&nChannel=Products
http://localhost/dUpro/Files/../Topics/default.asp?iChannel='SQL_INJECTI
ON&nChannel=Topics
http://localhost/dUpro/Files/cat.asp?iCat=196&iChannel=4&nChannel='SQL_I
NJECTION
http://localhost/dUpro/Files/cat.asp?iCat=196&iChannel='SQL_INJECTION&nC
hannel=Files
http://localhost/dUpro/Files/cat.asp?iCat='SQL_INJECTION&iChannel=4&nCha
nnel=Files
http://localhost/dUpro/Files/default.asp?iChannel=4&nChannel='SQL_INJECT
ION
http://localhost/dUpro/Files/default.asp?iChannel='SQL_INJECTION&nChanne
l=Files
http://localhost/dUpro/Files/detail.asp?iData=4&iCat=433&iChannel=4&nCha
nnel='SQL_INJECTION
http://localhost/dUpro/Files/detail.asp?iData=4&iCat=433&iChannel='SQL_I
NJECTION&nChannel=Files
http://localhost/dUpro/Files/detail.asp?iData='SQL_INJECTION&iCat=433&iC
hannel=4&nChannel=Files
http://localhost/dUpro/home/../Articles/cat.asp?iCat=238&iChannel=2&nCha
nnel='SQL_INJECTION
http://localhost/dUpro/home/../Articles/cat.asp?iCat=238&iChannel='SQL_I
NJECTION&nChannel=Articles
http://localhost/dUpro/home/../Articles/cat.asp?iCat='SQL_INJECTION&iCha
nnel=2&nChannel=Articles
http://localhost/dUpro/home/../Articles/default.asp?iChannel=2&nChannel=
'SQL_INJECTION
http://localhost/dUpro/home/../Articles/default.asp?iChannel='SQL_INJECT
ION&nChannel=Articles
http://localhost/dUpro/home/../Articles/detail.asp?iData=26&iCat=238&iCh
annel=2&nChannel='SQL_INJECTION
http://localhost/dUpro/home/../Articles/detail.asp?iData=26&iCat=238&iCh
annel='SQL_INJECTION&nChannel=Articles
http://localhost/dUpro/home/../Articles/detail.asp?iData='SQL_INJECTION&
iCat=238&iChannel=2&nChannel=Articles
http://localhost/dUpro/home/../Businesses/cat.asp?iCat=548&iChannel=18&n
Channel='SQL_INJECTION
http://localhost/dUpro/home/../Businesses/cat.asp?iCat=548&iChannel='SQL
_INJECTION&nChannel=Businesses
http://localhost/dUpro/home/../Businesses/cat.asp?iCat='SQL_INJECTION&iC
hannel=18&nChannel=Businesses
http://localhost/dUpro/home/../Businesses/default.asp?iChannel=18&nChann
el='SQL_INJECTION
http://localhost/dUpro/home/../Businesses/default.asp?iChannel='SQL_INJE
CTION&nChannel=Businesses
http://localhost/dUpro/home/../Businesses/detail.asp?iData=16&iCat=548&i
Channel=18&nChannel='SQL_INJECTION
http://localhost/dUpro/home/../Businesses/detail.asp?iData=16&iCat=548&i
Channel='SQL_INJECTION&nChannel=Businesses
http://localhost/dUpro/home/../Businesses/detail.asp?iData='SQL_INJECTIO
N&iCat=548&iChannel=18&nChannel=Businesses
http://localhost/dUpro/home/../Classifieds/cat.asp?iCat=222&iChannel=7&n
Channel='SQL_INJECTION
http://localhost/dUpro/home/../Classifieds/cat.asp?iCat=222&iChannel='SQ
L_INJECTION&nChannel=Classifieds
http://localhost/dUpro/home/../Classifieds/cat.asp?iCat='SQL_INJECTION&i
Channel=7&nChannel=Classifieds
http://localhost/dUpro/home/../Classifieds/default.asp?iChannel=7&nChann
el='SQL_INJECTION
http://localhost/dUpro/home/../Classifieds/default.asp?iChannel='SQL_INJ
ECTION&nChannel=Classifieds
http://localhost/dUpro/home/../Classifieds/detail.asp?iData=15&iCat=222&
iChannel=7&nChannel='SQL_INJECTION
http://localhost/dUpro/home/../Classifieds/detail.asp?iData=15&iCat=222&
iChannel='SQL_INJECTION&nChannel=Classifieds
http://localhost/dUpro/home/../Classifieds/detail.asp?iData='SQL_INJECTI
ON&iCat=222&iChannel=7&nChannel=Classifieds
http://localhost/dUpro/home/../Entertainments/cat.asp?iCat=595&iChannel=
19&nChannel='SQL_INJECTION
http://localhost/dUpro/home/../Entertainments/cat.asp?iCat=595&iChannel=
'SQL_INJECTION&nChannel=Entertainments
http://localhost/dUpro/home/../Entertainments/cat.asp?iCat='SQL_INJECTIO
N&iChannel=19&nChannel=Entertainments
http://localhost/dUpro/home/../Entertainments/default.asp?iChannel=19&nC
hannel='SQL_INJECTION
http://localhost/dUpro/home/../Entertainments/default.asp?iChannel='SQL_
INJECTION&nChannel=Entertainments
http://localhost/dUpro/home/../Entertainments/detail.asp?iData=4&iCat=60
5&iChannel=19&nChannel='SQL_INJECTION
http://localhost/dUpro/home/../Entertainments/detail.asp?iData=4&iCat=60
5&iChannel='SQL_INJECTION&nChannel=Entertainments
http://localhost/dUpro/home/../Entertainments/detail.asp?iData='SQL_INJE
CTION&iCat=605&iChannel=19&nChannel=Entertainments
http://localhost/dUpro/home/../Events/cat.asp?iCat=247&iChannel=6&nChann
el='SQL_INJECTION
http://localhost/dUpro/home/../Events/cat.asp?iCat=247&iChannel='SQL_INJ
ECTION&nChannel=Events
http://localhost/dUpro/home/../Events/cat.asp?iCat='SQL_INJECTION&iChann
el=6&nChannel=Events
http://localhost/dUpro/home/../Events/default.asp?iChannel=6&nChannel='S
QL_INJECTION
http://localhost/dUpro/home/../events/default.asp?iChannel=6&nChannel='S
QL_INJECTION&iDate=4%2f1%2f2005
http://localhost/dUpro/home/../Events/default.asp?iChannel='SQL_INJECTIO
N&nChannel=Events
http://localhost/dUpro/home/../events/default.asp?iChannel='SQL_INJECTIO
N&nChannel=Events&iDate=4%2f1%2f2005
http://localhost/dUpro/home/../Events/detail.asp?iData=24&iCat=247&iChan
nel=6&nChannel='SQL_INJECTION
http://localhost/dUpro/home/../Events/detail.asp?iData=24&iCat=247&iChan
nel='SQL_INJECTION&nChannel=Events
http://localhost/dUpro/home/../Events/detail.asp?iData=5&iCat=327&iChann
el=6&nChannel='SQL_INJECTION
http://localhost/dUpro/home/../Events/detail.asp?iData=5&iCat=327&iChann
el='SQL_INJECTION&nChannel=Events
http://localhost/dUpro/home/../Events/detail.asp?iData='SQL_INJECTION&iC
at=247&iChannel=6&nChannel=Events
http://localhost/dUpro/home/../Events/detail.asp?iData='SQL_INJECTION&iC
at=327&iChannel=6&nChannel=Events
http://localhost/dUpro/home/../Files/cat.asp?iCat=197&iChannel=4&nChanne
l='SQL_INJECTION
http://localhost/dUpro/home/../Files/cat.asp?iCat=197&iChannel='SQL_INJE
CTION&nChannel=Files
http://localhost/dUpro/home/../Files/cat.asp?iCat='SQL_INJECTION&iChanne
l=4&nChannel=Files
http://localhost/dUpro/home/../Files/default.asp?iChannel=4&nChannel='SQ
L_INJECTION
http://localhost/dUpro/home/../Files/default.asp?iChannel='SQL_INJECTION
&nChannel=Files
http://localhost/dUpro/home/../Files/detail.asp?iData=5&iCat=434&iChanne
l=4&nChannel='SQL_INJECTION
http://localhost/dUpro/home/../Files/detail.asp?iData=5&iCat=434&iChanne
l='SQL_INJECTION&nChannel=Files
http://localhost/dUpro/home/../Files/detail.asp?iData='SQL_INJECTION&iCa
t=434&iChannel=4&nChannel=Files
http://localhost/dUpro/home/../home/search.asp?keyword=dcrab&iChannel='S
QL_INJECTION
http://localhost/dUpro/home/../Links/cat.asp?iCat=6&iChannel=5&nChannel=
'SQL_INJECTION
http://localhost/dUpro/home/../Links/cat.asp?iCat=6&iChannel='SQL_INJECT
ION&nChannel=Links
http://localhost/dUpro/home/../Links/cat.asp?iCat='SQL_INJECTION&iChanne
l=5&nChannel=Links
http://localhost/dUpro/home/../Links/default.asp?iChannel=5&nChannel='SQ
L_INJECTION
http://localhost/dUpro/home/../Links/default.asp?iChannel='SQL_INJECTION
&nChannel=Links
http://localhost/dUpro/home/../Links/detail.asp?iData=6&iCat=390&iChanne
l=5&nChannel='SQL_INJECTION
http://localhost/dUpro/home/../Links/detail.asp?iData=6&iCat=390&iChanne
l='SQL_INJECTION&nChannel=Links
http://localhost/dUpro/home/../Links/detail.asp?iData='SQL_INJECTION&iCa
t=390&iChannel=5&nChannel=Links
http://localhost/dUpro/home/../News/cat.asp?iCat=250&iChannel=1&nChannel
='SQL_INJECTION
http://localhost/dUpro/home/../News/cat.asp?iCat=250&iChannel='SQL_INJEC
TION&nChannel=News
http://localhost/dUpro/home/../News/cat.asp?iCat='SQL_INJECTION&iChannel
=1&nChannel=News
http://localhost/dUpro/home/../News/default.asp?iChannel=1&nChannel='SQL
_INJECTION
http://localhost/dUpro/home/../News/default.asp?iChannel='SQL_INJECTION&
nChannel=News
http://localhost/dUpro/home/../News/detail.asp?iData=21&iCat=250&iChanne
l=1&nChannel='SQL_INJECTION
http://localhost/dUpro/home/../news/detail.asp?iData=21&iCat=250&iChanne
l=1&nChannel='SQL_INJECTION
http://localhost/dUpro/home/../News/detail.asp?iData=21&iCat=250&iChanne
l='SQL_INJECTION&nChannel=News
http://localhost/dUpro/home/../news/detail.asp?iData=21&iCat=250&iChanne
l='SQL_INJECTION&nChannel=News
http://localhost/dUpro/home/../News/detail.asp?iData='SQL_INJECTION&iCat
=250&iChannel=1&nChannel=News
http://localhost/dUpro/home/../news/detail.asp?iData='SQL_INJECTION&iCat
=250&iChannel=1&nChannel=News
http://localhost/dUpro/home/../Pictures/cat.asp?iCat=206&iChannel=3&nCha
nnel='SQL_INJECTION
http://localhost/dUpro/home/../Pictures/cat.asp?iCat=206&iChannel='SQL_I
NJECTION&nChannel=Pictures
http://localhost/dUpro/home/../Pictures/cat.asp?iCat='SQL_INJECTION&iCha
nnel=3&nChannel=Pictures
http://localhost/dUpro/home/../Pictures/default.asp?iChannel=3&nChannel=
'SQL_INJECTION
http://localhost/dUpro/home/../Pictures/default.asp?iChannel='SQL_INJECT
ION&nChannel=Pictures
http://localhost/dUpro/home/../Pictures/detail.asp?iData=51&iCat=209&iCh
annel=3&nChannel='SQL_INJECTION
http://localhost/dUpro/home/../Pictures/detail.asp?iData=51&iCat=209&iCh
annel='SQL_INJECTION&nChannel=Pictures
http://localhost/dUpro/home/../Pictures/detail.asp?iData=51&iCat='SQL_IN
JECTION&iChannel=3&nChannel=Pictures
http://localhost/dUpro/home/../Pictures/detail.asp?iData=53&iCat=510&iCh
annel=3&nChannel='SQL_INJECTION
http://localhost/dUpro/home/../Pictures/detail.asp?iData=53&iCat=510&iCh
annel='SQL_INJECTION&nChannel=Pictures
http://localhost/dUpro/home/../Pictures/detail.asp?iData=53&iCat='SQL_IN
JECTION&iChannel=3&nChannel=Pictures
http://localhost/dUpro/home/../Pictures/detail.asp?iData=54&iCat=514&iCh
annel=3&nChannel='SQL_INJECTION
http://localhost/dUpro/home/../Pictures/detail.asp?iData=54&iCat=514&iCh
annel='SQL_INJECTION&nChannel=Pictures
http://localhost/dUpro/home/../Pictures/detail.asp?iData=54&iCat='SQL_IN
JECTION&iChannel=3&nChannel=Pictures
http://localhost/dUpro/home/../Pictures/detail.asp?iData=55&iCat=206&iCh
annel=3&nChannel='SQL_INJECTION
http://localhost/dUpro/home/../Pictures/detail.asp?iData=55&iCat=206&iCh
annel='SQL_INJECTION&nChannel=Pictures
http://localhost/dUpro/home/../Pictures/detail.asp?iData=55&iCat='SQL_IN
JECTION&iChannel=3&nChannel=Pictures
http://localhost/dUpro/home/../Pictures/detail.asp?iData=56&iCat=206&iCh
annel=3&nChannel='SQL_INJECTION
http://localhost/dUpro/home/../Pictures/detail.asp?iData=56&iCat=206&iCh
annel='SQL_INJECTION&nChannel=Pictures
http://localhost/dUpro/home/../Pictures/detail.asp?iData=56&iCat='SQL_IN
JECTION&iChannel=3&nChannel=Pictures
http://localhost/dUpro/home/../Pictures/detail.asp?iData=6&iCat=206&iCha
nnel=3&nChannel='SQL_INJECTION
http://localhost/dUpro/home/../Pictures/detail.asp?iData=6&iCat=206&iCha
nnel='SQL_INJECTION&nChannel=Pictures
http://localhost/dUpro/home/../Pictures/detail.asp?iData=6&iCat='SQL_INJ
ECTION&iChannel=3&nChannel=Pictures
http://localhost/dUpro/home/../Pictures/detail.asp?iData=7&iCat=206&iCha
nnel=3&nChannel='SQL_INJECTION
http://localhost/dUpro/home/../Pictures/detail.asp?iData=7&iCat=206&iCha
nnel='SQL_INJECTION&nChannel=Pictures
http://localhost/dUpro/home/../Pictures/detail.asp?iData=7&iCat='SQL_INJ
ECTION&iChannel=3&nChannel=Pictures
http://localhost/dUpro/home/../Pictures/detail.asp?iData='SQL_INJECTION&
iCat=206&iChannel=3&nChannel=Pictures
http://localhost/dUpro/home/../Pictures/detail.asp?iData='SQL_INJECTION&
iCat=209&iChannel=3&nChannel=Pictures
http://localhost/dUpro/home/../Pictures/detail.asp?iData='SQL_INJECTION&
iCat=510&iChannel=3&nChannel=Pictures
http://localhost/dUpro/home/../Pictures/detail.asp?iData='SQL_INJECTION&
iCat=514&iChannel=3&nChannel=Pictures
http://localhost/dUpro/home/../Polls/default.asp?iChannel=15&nChannel='S
QL_INJECTION
http://localhost/dUpro/home/../Polls/default.asp?iChannel='SQL_INJECTION
&nChannel=Polls
http://localhost/dUpro/home/../polls/inc_vote.asp?POL_PARENT=74&POL_CATE
GORY=254&CHA_ID=15&CHA_NAME='SQL_INJECTION&POL_ID=76&POL_ID=77&POL_ID=75
http://localhost/dUpro/home/../polls/inc_vote.asp?POL_PARENT=74&POL_CATE
GORY=254&CHA_ID=15&CHA_NAME=Polls&POL_ID=76&POL_ID=77&POL_ID='SQL_INJECT
ION
http://localhost/dUpro/home/../polls/inc_vote.asp?POL_PARENT=74&POL_CATE
GORY=254&CHA_ID=15&CHA_NAME=Polls&POL_ID=76&POL_ID='SQL_INJECTION&POL_ID
=75
http://localhost/dUpro/home/../polls/inc_vote.asp?POL_PARENT=74&POL_CATE
GORY=254&CHA_ID=15&CHA_NAME=Polls&POL_ID='SQL_INJECTION&POL_ID=77&POL_ID
=75
http://localhost/dUpro/home/../polls/inc_vote.asp?POL_PARENT=74&POL_CATE
GORY=254&CHA_ID='SQL_INJECTION&CHA_NAME=Polls&POL_ID=76&POL_ID=77&POL_ID
=75
http://localhost/dUpro/home/../polls/inc_vote.asp?POL_PARENT=74&POL_CATE
GORY='SQL_INJECTION&CHA_ID=15&CHA_NAME=Polls&POL_ID=76&POL_ID=77&POL_ID=
75
http://localhost/dUpro/home/../polls/inc_vote.asp?POL_PARENT='SQL_INJECT
ION&POL_CATEGORY=254&CHA_ID=15&CHA_NAME=Polls&POL_ID=76&POL_ID=77&POL_ID
=75
http://localhost/dUpro/home/../polls/result.asp?iData=74&iCat=254&iChann
el='SQL_INJECTION&nChannel=Polls
http://localhost/dUpro/home/../polls/result.asp?iData='SQL_INJECTION&iCa
t=254&iChannel=15&nChannel=Polls
http://localhost/dUpro/home/../Products/cat.asp?iCat=231&iChannel=8&nCha
nnel='SQL_INJECTION
http://localhost/dUpro/home/../Products/cat.asp?iCat=231&iChannel='SQL_I
NJECTION&nChannel=Products
http://localhost/dUpro/home/../Products/cat.asp?iCat='SQL_INJECTION&iCha
nnel=8&nChannel=Products
http://localhost/dUpro/home/../Products/default.asp?iChannel=8&nChannel=
'SQL_INJECTION
http://localhost/dUpro/home/../Products/default.asp?iChannel='SQL_INJECT
ION&nChannel=Products
http://localhost/dUpro/home/../Products/detail.asp?iData=9&iCat=231&iCha
nnel=8&nChannel='SQL_INJECTION
http://localhost/dUpro/home/../Products/detail.asp?iData=9&iCat=231&iCha
nnel='SQL_INJECTION&nChannel=Products
http://localhost/dUpro/home/../Products/detail.asp?iData='SQL_INJECTION&
iCat=231&iChannel=8&nChannel=Products
http://localhost/dUpro/home/../Topics/cat.asp?iCat=465&iChannel='SQL_INJ
ECTION&nChannel=Topics
http://localhost/dUpro/home/../Topics/cat.asp?iCat='SQL_INJECTION&iChann
el=16&nChannel=Topics
http://localhost/dUpro/home/../Topics/default.asp?iChannel='SQL_INJECTIO
N&nChannel=Topics
http://localhost/dUpro/home/../Topics/detail.asp?iData=29&iCat=478&iChan
nel='SQL_INJECTION&nChannel=Topics
http://localhost/dUpro/home/../Topics/detail.asp?iData=29&iCat='SQL_INJE
CTION&iChannel=16&nChannel=Topics
http://localhost/dUpro/home/../Topics/detail.asp?iData='SQL_INJECTION&iC
at=478&iChannel=16&nChannel=Topics
http://localhost/dUpro/home/toppages.asp?tfm_order=ASC&tfm_orderby='SQL_
INJECTION
http://localhost/dUpro/home/toppages.asp?tfm_order='SQL_INJECTION&tfm_or
derby=PAG_NAME
http://localhost/dUpro/Pictures/../Articles/default.asp?iChannel=2&nChan
nel='SQL_INJECTION
http://localhost/dUpro/Pictures/../Articles/default.asp?iChannel='SQL_IN
JECTION&nChannel=Articles
http://localhost/dUpro/Pictures/../Businesses/default.asp?iChannel=18&nC
hannel='SQL_INJECTION
http://localhost/dUpro/Pictures/../Businesses/default.asp?iChannel='SQL_
INJECTION&nChannel=Businesses
http://localhost/dUpro/Pictures/../Classifieds/default.asp?iChannel=7&nC
hannel='SQL_INJECTION
http://localhost/dUpro/Pictures/../Classifieds/default.asp?iChannel='SQL
_INJECTION&nChannel=Classifieds
http://localhost/dUpro/Pictures/../Entertainments/default.asp?iChannel=1
9&nChannel='SQL_INJECTION
http://localhost/dUpro/Pictures/../Entertainments/default.asp?iChannel='
SQL_INJECTION&nChannel=Entertainments
http://localhost/dUpro/Pictures/../Events/default.asp?iChannel=6&nChanne
l='SQL_INJECTION
http://localhost/dUpro/Pictures/../events/default.asp?iChannel=6&nChanne
l='SQL_INJECTION&iDate=4%2f1%2f2005
http://localhost/dUpro/Pictures/../Events/default.asp?iChannel='SQL_INJE
CTION&nChannel=Events
http://localhost/dUpro/Pictures/../events/default.asp?iChannel='SQL_INJE
CTION&nChannel=Events&iDate=4%2f1%2f2005
http://localhost/dUpro/Pictures/../Files/default.asp?iChannel=4&nChannel
='SQL_INJECTION
http://localhost/dUpro/Pictures/../Files/default.asp?iChannel='SQL_INJEC
TION&nChannel=Files
http://localhost/dUpro/Pictures/../home/search.asp?keyword=dcrab&iChanne
l='SQL_INJECTION
http://localhost/dUpro/Pictures/../Links/default.asp?iChannel=5&nChannel
='SQL_INJECTION
http://localhost/dUpro/Pictures/../Links/default.asp?iChannel='SQL_INJEC
TION&nChannel=Links
http://localhost/dUpro/Pictures/../News/default.asp?iChannel=1&nChannel=
'SQL_INJECTION
http://localhost/dUpro/Pictures/../News/default.asp?iChannel='SQL_INJECT
ION&nChannel=News
http://localhost/dUpro/Pictures/../Pictures/default.asp?iChannel=3&nChan
nel='SQL_INJECTION
http://localhost/dUpro/Pictures/../Pictures/default.asp?iChannel='SQL_IN
JECTION&nChannel=Pictures
http://localhost/dUpro/Pictures/../Pictures/detail.asp?iData=5&iCat=520&
iChannel=3&nChannel='SQL_INJECTION
http://localhost/dUpro/Pictures/../Pictures/detail.asp?iData=5&iCat=520&
iChannel='SQL_INJECTION&nChannel=Pictures
http://localhost/dUpro/Pictures/../Pictures/detail.asp?iData=5&iCat='SQL
_INJECTION&iChannel=3&nChannel=Pictures
http://localhost/dUpro/Pictures/../Pictures/detail.asp?iData='SQL_INJECT
ION&iCat=520&iChannel=3&nChannel=Pictures
http://localhost/dUpro/Pictures/../Polls/default.asp?iChannel=15&nChanne
l='SQL_INJECTION
http://localhost/dUpro/Pictures/../Polls/default.asp?iChannel='SQL_INJEC
TION&nChannel=Polls
http://localhost/dUpro/Pictures/../polls/inc_vote.asp?POL_PARENT=74&POL_
CATEGORY=254&CHA_ID=15&CHA_NAME='SQL_INJECTION&POL_ID=76&POL_ID=77&POL_I
D=75
http://localhost/dUpro/Pictures/../polls/inc_vote.asp?POL_PARENT=74&POL_
CATEGORY=254&CHA_ID=15&CHA_NAME=Polls&POL_ID=76&POL_ID=77&POL_ID='SQL_IN
JECTION
http://localhost/dUpro/Pictures/../polls/inc_vote.asp?POL_PARENT=74&POL_
CATEGORY=254&CHA_ID=15&CHA_NAME=Polls&POL_ID=76&POL_ID='SQL_INJECTION&PO
L_ID=75
http://localhost/dUpro/Pictures/../polls/inc_vote.asp?POL_PARENT=74&POL_
CATEGORY=254&CHA_ID=15&CHA_NAME=Polls&POL_ID='SQL_INJECTION&POL_ID=77&PO
L_ID=75
http://localhost/dUpro/Pictures/../polls/inc_vote.asp?POL_PARENT=74&POL_
CATEGORY=254&CHA_ID='SQL_INJECTION&CHA_NAME=Polls&POL_ID=76&POL_ID=77&PO
L_ID=75
http://localhost/dUpro/Pictures/../polls/inc_vote.asp?POL_PARENT=74&POL_
CATEGORY='SQL_INJECTION&CHA_ID=15&CHA_NAME=Polls&POL_ID=76&POL_ID=77&POL
_ID=75
http://localhost/dUpro/Pictures/../polls/inc_vote.asp?POL_PARENT='SQL_IN
JECTION&POL_CATEGORY=254&CHA_ID=15&CHA_NAME=Polls&POL_ID=76&POL_ID=77&PO
L_ID=75
http://localhost/dUpro/Pictures/../polls/result.asp?iData=74&iCat=254&iC
hannel='SQL_INJECTION&nChannel=Polls
http://localhost/dUpro/Pictures/../polls/result.asp?iData='SQL_INJECTION
&iCat=254&iChannel=15&nChannel=Polls
http://localhost/dUpro/Pictures/../Products/default.asp?iChannel=8&nChan
nel='SQL_INJECTION
http://localhost/dUpro/Pictures/../Products/default.asp?iChannel='SQL_IN
JECTION&nChannel=Products
http://localhost/dUpro/Pictures/../Topics/default.asp?iChannel='SQL_INJE
CTION&nChannel=Topics
http://localhost/dUpro/Pictures/cat.asp?iCat=206&iChannel=3&nChannel='SQ
L_INJECTION
http://localhost/dUpro/Pictures/cat.asp?iCat=206&iChannel='SQL_INJECTION
&nChannel=Pictures
http://localhost/dUpro/Pictures/cat.asp?iCat='SQL_INJECTION&iChannel=3&n
Channel=Pictures
http://localhost/dUpro/Pictures/default.asp?iChannel=3&nChannel='SQL_INJ
ECTION
http://localhost/dUpro/Pictures/default.asp?iChannel='SQL_INJECTION&nCha
nnel=Pictures
http://localhost/dUpro/Pictures/detail.asp?iData=10&iCat=499&iChannel=3&
nChannel='SQL_INJECTION
http://localhost/dUpro/Pictures/detail.asp?iData=10&iCat=499&iChannel='S
QL_INJECTION&nChannel=Pictures
http://localhost/dUpro/Pictures/detail.asp?iData=10&iCat='SQL_INJECTION&
iChannel=3&nChannel=Pictures
http://localhost/dUpro/Pictures/detail.asp?iData='SQL_INJECTION&iCat=499
&iChannel=3&nChannel=Pictures
http://localhost/dUpro/polls/../polls/../Articles/default.asp?iChannel=2
&nChannel='SQL_INJECTION
http://localhost/dUpro/polls/../polls/../Articles/default.asp?iChannel='
SQL_INJECTION&nChannel=Articles
http://localhost/dUpro/polls/../polls/../Businesses/default.asp?iChannel
=18&nChannel='SQL_INJECTION
http://localhost/dUpro/polls/../polls/../Businesses/default.asp?iChannel
='SQL_INJECTION&nChannel=Businesses
http://localhost/dUpro/polls/../polls/../Classifieds/default.asp?iChanne
l=7&nChannel='SQL_INJECTION
http://localhost/dUpro/polls/../polls/../Classifieds/default.asp?iChanne
l='SQL_INJECTION&nChannel=Classifieds
http://localhost/dUpro/polls/../polls/../Entertainments/default.asp?iCha
nnel=19&nChannel='SQL_INJECTION
http://localhost/dUpro/polls/../polls/../Entertainments/default.asp?iCha
nnel='SQL_INJECTION&nChannel=Entertainments
http://localhost/dUpro/polls/../polls/../Events/default.asp?iChannel=6&n
Channel='SQL_INJECTION
http://localhost/dUpro/polls/../polls/../events/default.asp?iChannel=6&n
Channel='SQL_INJECTION&iDate=4%2f1%2f2005
http://localhost/dUpro/polls/../polls/../Events/default.asp?iChannel='SQ
L_INJECTION&nChannel=Events
http://localhost/dUpro/polls/../polls/../events/default.asp?iChannel='SQ
L_INJECTION&nChannel=Events&iDate=4%2f1%2f2005
http://localhost/dUpro/polls/../polls/../Files/default.asp?iChannel=4&nC
hannel='SQL_INJECTION
http://localhost/dUpro/polls/../polls/../Files/default.asp?iChannel='SQL
_INJECTION&nChannel=Files
http://localhost/dUpro/polls/../polls/../home/search.asp?keyword=dcrab&i
Channel='SQL_INJECTION
http://localhost/dUpro/polls/../polls/../Links/default.asp?iChannel=5&nC
hannel='SQL_INJECTION
http://localhost/dUpro/polls/../polls/../Links/default.asp?iChannel='SQL
_INJECTION&nChannel=Links
http://localhost/dUpro/polls/../polls/../News/default.asp?iChannel=1&nCh
annel='SQL_INJECTION
http://localhost/dUpro/polls/../polls/../News/default.asp?iChannel='SQL_
INJECTION&nChannel=News
http://localhost/dUpro/polls/../polls/../Pictures/default.asp?iChannel=3
&nChannel='SQL_INJECTION
http://localhost/dUpro/polls/../polls/../Pictures/default.asp?iChannel='
SQL_INJECTION&nChannel=Pictures
http://localhost/dUpro/polls/../polls/../Pictures/detail.asp?iData=30&iC
at=208&iChannel=3&nChannel='SQL_INJECTION
http://localhost/dUpro/polls/../polls/../Pictures/detail.asp?iData=30&iC
at=208&iChannel='SQL_INJECTION&nChannel=Pictures
http://localhost/dUpro/polls/../polls/../Pictures/detail.asp?iData=30&iC
at='SQL_INJECTION&iChannel=3&nChannel=Pictures
http://localhost/dUpro/polls/../polls/../Pictures/detail.asp?iData='SQL_
INJECTION&iCat=208&iChannel=3&nChannel=Pictures
http://localhost/dUpro/polls/../polls/../Polls/default.asp?iChannel=15&n
Channel='SQL_INJECTION
http://localhost/dUpro/polls/../polls/../Polls/default.asp?iChannel='SQL
_INJECTION&nChannel=Polls
http://localhost/dUpro/polls/../polls/../polls/inc_vote.asp?POL_PARENT=7
4&POL_CATEGORY=254&CHA_ID=15&CHA_NAME='SQL_INJECTION&POL_ID=76&POL_ID=77
&POL_ID=75
http://localhost/dUpro/polls/../polls/../polls/inc_vote.asp?POL_PARENT=7
4&POL_CATEGORY=254&CHA_ID=15&CHA_NAME=Polls&POL_ID=76&POL_ID=77&POL_ID='
SQL_INJECTION
http://localhost/dUpro/polls/../polls/../polls/inc_vote.asp?POL_PARENT=7
4&POL_CATEGORY=254&CHA_ID=15&CHA_NAME=Polls&POL_ID=76&POL_ID='SQL_INJECT
ION&POL_ID=75
http://localhost/dUpro/polls/../polls/../polls/inc_vote.asp?POL_PARENT=7
4&POL_CATEGORY=254&CHA_ID=15&CHA_NAME=Polls&POL_ID='SQL_INJECTION&POL_ID
=77&POL_ID=75
http://localhost/dUpro/polls/../polls/../polls/inc_vote.asp?POL_PARENT=7
4&POL_CATEGORY=254&CHA_ID='SQL_INJECTION&CHA_NAME=Polls&POL_ID=76&POL_ID
=77&POL_ID=75
http://localhost/dUpro/polls/../polls/../polls/inc_vote.asp?POL_PARENT=7
4&POL_CATEGORY='SQL_INJECTION&CHA_ID=15&CHA_NAME=Polls&POL_ID=76&POL_ID=
77&POL_ID=75
http://localhost/dUpro/polls/../polls/../polls/inc_vote.asp?POL_PARENT='
SQL_INJECTION&POL_CATEGORY=254&CHA_ID=15&CHA_NAME=Polls&POL_ID=76&POL_ID
=77&POL_ID=75
http://localhost/dUpro/polls/../polls/../polls/result.asp?iData=74&iCat=
254&iChannel='SQL_INJECTION&nChannel=Polls
http://localhost/dUpro/polls/../polls/../polls/result.asp?iData='SQL_INJ
ECTION&iCat=254&iChannel=15&nChannel=Polls
http://localhost/dUpro/polls/../polls/../Products/default.asp?iChannel=8
&nChannel='SQL_INJECTION
http://localhost/dUpro/polls/../polls/../Products/default.asp?iChannel='
SQL_INJECTION&nChannel=Products
http://localhost/dUpro/polls/../polls/../Topics/default.asp?iChannel='SQ
L_INJECTION&nChannel=Topics
http://localhost/dUpro/polls/../polls/default.asp?iChannel=&nChannel='SQ
L_INJECTION
http://localhost/dUpro/polls/../polls/default.asp?iChannel='SQL_INJECTIO
N&nChannel=
http://localhost/dUpro/Topics/../Articles/default.asp?iChannel=2&nChanne
l='SQL_INJECTION
http://localhost/dUpro/Topics/../Articles/default.asp?iChannel='SQL_INJE
CTION&nChannel=Articles
http://localhost/dUpro/Topics/../Businesses/default.asp?iChannel=18&nCha
nnel='SQL_INJECTION
http://localhost/dUpro/Topics/../Businesses/default.asp?iChannel='SQL_IN
JECTION&nChannel=Businesses
http://localhost/dUpro/Topics/../Classifieds/default.asp?iChannel=7&nCha
nnel='SQL_INJECTION
http://localhost/dUpro/Topics/../Classifieds/default.asp?iChannel='SQL_I
NJECTION&nChannel=Classifieds
http://localhost/dUpro/Topics/../Entertainments/default.asp?iChannel=19&
nChannel='SQL_INJECTION
http://localhost/dUpro/Topics/../Entertainments/default.asp?iChannel='SQ
L_INJECTION&nChannel=Entertainments
http://localhost/dUpro/Topics/../Events/default.asp?iChannel=6&nChannel=
'SQL_INJECTION
http://localhost/dUpro/Topics/../Events/default.asp?iChannel='SQL_INJECT
ION&nChannel=Events
http://localhost/dUpro/Topics/../Files/default.asp?iChannel=4&nChannel='
SQL_INJECTION
http://localhost/dUpro/Topics/../Files/default.asp?iChannel='SQL_INJECTI
ON&nChannel=Files
http://localhost/dUpro/Topics/../home/search.asp?keyword=dcrab&iChannel=
'SQL_INJECTION
http://localhost/dUpro/Topics/../Links/default.asp?iChannel=5&nChannel='
SQL_INJECTION
http://localhost/dUpro/Topics/../Links/default.asp?iChannel='SQL_INJECTI
ON&nChannel=Links
http://localhost/dUpro/Topics/../News/default.asp?iChannel=1&nChannel='S
QL_INJECTION
http://localhost/dUpro/Topics/../News/default.asp?iChannel='SQL_INJECTIO
N&nChannel=News
http://localhost/dUpro/Topics/../Pictures/default.asp?iChannel=3&nChanne
l='SQL_INJECTION
http://localhost/dUpro/Topics/../Pictures/default.asp?iChannel='SQL_INJE
CTION&nChannel=Pictures
http://localhost/dUpro/Topics/../Polls/default.asp?iChannel=15&nChannel=
'SQL_INJECTION
http://localhost/dUpro/Topics/../Polls/default.asp?iChannel='SQL_INJECTI
ON&nChannel=Polls
http://localhost/dUpro/Topics/../polls/inc_vote.asp?POL_PARENT=74&POL_CA
TEGORY=254&CHA_ID=15&CHA_NAME='SQL_INJECTION&POL_ID=76&POL_ID=77&POL_ID=
75
http://localhost/dUpro/Topics/../polls/inc_vote.asp?POL_PARENT=74&POL_CA
TEGORY=254&CHA_ID=15&CHA_NAME=Polls&POL_ID=76&POL_ID=77&POL_ID='SQL_INJE
CTION
http://localhost/dUpro/Topics/../polls/inc_vote.asp?POL_PARENT=74&POL_CA
TEGORY=254&CHA_ID=15&CHA_NAME=Polls&POL_ID=76&POL_ID='SQL_INJECTION&POL_
ID=75
http://localhost/dUpro/Topics/../polls/inc_vote.asp?POL_PARENT=74&POL_CA
TEGORY=254&CHA_ID=15&CHA_NAME=Polls&POL_ID='SQL_INJECTION&POL_ID=77&POL_
ID=75
http://localhost/dUpro/Topics/../polls/inc_vote.asp?POL_PARENT=74&POL_CA
TEGORY=254&CHA_ID='SQL_INJECTION&CHA_NAME=Polls&POL_ID=76&POL_ID=77&POL_
ID=75
http://localhost/dUpro/Topics/../polls/inc_vote.asp?POL_PARENT=74&POL_CA
TEGORY='SQL_INJECTION&CHA_ID=15&CHA_NAME=Polls&POL_ID=76&POL_ID=77&POL_I
D=75
http://localhost/dUpro/Topics/../polls/inc_vote.asp?POL_PARENT='SQL_INJE
CTION&POL_CATEGORY=254&CHA_ID=15&CHA_NAME=Polls&POL_ID=76&POL_ID=77&POL_
ID=75
http://localhost/dUpro/Topics/../polls/result.asp?iData=74&iCat=254&iCha
nnel='SQL_INJECTION&nChannel=Polls
http://localhost/dUpro/Topics/../polls/result.asp?iData='SQL_INJECTION&i
Cat=254&iChannel=15&nChannel=Polls
http://localhost/dUpro/Topics/../Products/default.asp?iChannel=8&nChanne
l='SQL_INJECTION
http://localhost/dUpro/Topics/../Products/default.asp?iChannel='SQL_INJE
CTION&nChannel=Products
http://localhost/dUpro/Topics/../topics/cat.asp?iCat=483&iChannel='SQL_I
NJECTION&nChannel=Topics
http://localhost/dUpro/Topics/../topics/cat.asp?iCat='SQL_INJECTION&iCha
nnel=16&nChannel=Topics
http://localhost/dUpro/Topics/../topics/default.asp?iChannel='SQL_INJECT
ION&nChannel=
http://localhost/dUpro/Topics/../Topics/default.asp?iChannel='SQL_INJECT
ION&nChannel=Topics
http://localhost/dUpro/Topics/../topics/detail.asp?iData=28&iCat=479&iCh
annel='SQL_INJECTION&nChannel=Topics
http://localhost/dUpro/Topics/../topics/detail.asp?iData=28&iCat='SQL_IN
JECTION&iChannel=16&nChannel=Topics
http://localhost/dUpro/Topics/../topics/detail.asp?iData='SQL_INJECTION&
iCat=479&iChannel=16&nChannel=Topics
http://localhost/dUpro/Topics/../topics/detail.asp?iData='SQL_INJECTION&
iCat=479&iChannel=16&nChannel=Topics
THESE ARE ALL SQL ERRORS
http://localhost/dUpro/Businesses/../events/default.asp?iChannel=6&nChan
nel=Events&iDate='SQL_ERRORS
http://localhost/dUpro/Businesses/../home/members.asp?iMem='SQL_ERRORS
http://localhost/dUpro/Businesses/../polls/result.asp?iData=74&iCat=254&
iChannel=15&nChannel='SQL_ERRORS
http://localhost/dUpro/Businesses/../polls/result.asp?iData=74&iCat='SQL
_ERRORS&iChannel=15&nChannel=Polls
http://localhost/dUpro/Businesses/../Topics/default.asp?iChannel=16&nCha
nnel='SQL_ERRORS
http://localhost/dUpro/Businesses/detail.asp?iData=1&iCat='SQL_ERRORS&iC
hannel=18&nChannel=Businesses
http://localhost/dUpro/Classifieds/../events/default.asp?iChannel=6&nCha
nnel=Events&iDate='SQL_ERRORS
http://localhost/dUpro/Classifieds/../home/members.asp?iMem='SQL_ERRORS
http://localhost/dUpro/Classifieds/../polls/result.asp?iData=74&iCat=254
&iChannel=15&nChannel='SQL_ERRORS
http://localhost/dUpro/Classifieds/../polls/result.asp?iData=74&iCat='SQ
L_ERRORS&iChannel=15&nChannel=Polls
http://localhost/dUpro/Classifieds/../Topics/default.asp?iChannel=16&nCh
annel='SQL_ERRORS
http://localhost/dUpro/Classifieds/detail.asp?iData=14&iCat='SQL_ERRORS&
iChannel=7&nChannel=Classifieds
http://localhost/dUpro/Events/../events/default.asp?iChannel=6&iDate='SQ
L_ERRORS&nChannel=Events
http://localhost/dUpro/events/../events/default.asp?iChannel=6&iDate='SQ
L_ERRORS&nChannel=Events
http://localhost/dUpro/Events/../events/detail.asp?iData=5&iCat='SQL_ERR
ORS&iChannel=6&nChannel=Events
http://localhost/dUpro/events/../events/detail.asp?iData=5&iCat='SQL_ERR
ORS&iChannel=6&nChannel=Events
http://localhost/dUpro/Events/../home/members.asp?iMem='SQL_ERRORS
http://localhost/dUpro/events/../home/members.asp?iMem='SQL_ERRORS
http://localhost/dUpro/Events/../polls/result.asp?iData=74&iCat=254&iCha
nnel=15&nChannel='SQL_ERRORS
http://localhost/dUpro/events/../polls/result.asp?iData=74&iCat=254&iCha
nnel=15&nChannel='SQL_ERRORS
http://localhost/dUpro/Events/../polls/result.asp?iData=74&iCat='SQL_ERR
ORS&iChannel=15&nChannel=Polls
http://localhost/dUpro/events/../polls/result.asp?iData=74&iCat='SQL_ERR
ORS&iChannel=15&nChannel=Polls
http://localhost/dUpro/Events/../Topics/default.asp?iChannel=16&nChannel
='SQL_ERRORS
http://localhost/dUpro/events/../Topics/default.asp?iChannel=16&nChannel
='SQL_ERRORS
http://localhost/dUpro/Files/../events/default.asp?iChannel=6&nChannel=E
vents&iDate='SQL_ERRORS
http://localhost/dUpro/Files/../home/members.asp?iMem='SQL_ERRORS
http://localhost/dUpro/Files/../polls/result.asp?iData=74&iCat=254&iChan
nel=15&nChannel='SQL_ERRORS
http://localhost/dUpro/Files/../polls/result.asp?iData=74&iCat='SQL_ERRO
RS&iChannel=15&nChannel=Polls
http://localhost/dUpro/Files/../Topics/default.asp?iChannel=16&nChannel=
'SQL_ERRORS
http://localhost/dUpro/Files/detail.asp?iData=4&iCat='SQL_ERRORS&iChanne
l=4&nChannel=Files
http://localhost/dUpro/home/../Articles/detail.asp?iData=26&iCat='SQL_ER
RORS&iChannel=2&nChannel=Articles
http://localhost/dUpro/home/../Businesses/detail.asp?iData=16&iCat='SQL_
ERRORS&iChannel=18&nChannel=Businesses
http://localhost/dUpro/home/../Classifieds/detail.asp?iData=15&iCat='SQL
_ERRORS&iChannel=7&nChannel=Classifieds
http://localhost/dUpro/home/../Entertainments/detail.asp?iData=4&iCat='S
QL_ERRORS&iChannel=19&nChannel=Entertainments
http://localhost/dUpro/home/../events/default.asp?iChannel=6&nChannel=Ev
ents&iDate='SQL_ERRORS
http://localhost/dUpro/home/../Events/detail.asp?iData=24&iCat='SQL_ERRO
RS&iChannel=6&nChannel=Events
http://localhost/dUpro/home/../Events/detail.asp?iData=5&iCat='SQL_ERROR
S&iChannel=6&nChannel=Events
http://localhost/dUpro/home/../Files/detail.asp?iData=5&iCat='SQL_ERRORS
&iChannel=4&nChannel=Files
http://localhost/dUpro/home/../home/members.asp?iMem='SQL_ERRORS
http://localhost/dUpro/home/../home/search.asp?keyword='SQL_ERRORS&iChan
nel=
http://localhost/dUpro/home/../Links/detail.asp?iData=6&iCat='SQL_ERRORS
&iChannel=5&nChannel=Links
http://localhost/dUpro/home/../News/detail.asp?iData=21&iCat='SQL_ERRORS
&iChannel=1&nChannel=News
http://localhost/dUpro/home/../news/detail.asp?iData=21&iCat='SQL_ERRORS
&iChannel=1&nChannel=News
http://localhost/dUpro/home/../polls/result.asp?iData=74&iCat=254&iChann
el=15&nChannel='SQL_ERRORS
http://localhost/dUpro/home/../polls/result.asp?iData=74&iCat='SQL_ERROR
S&iChannel=15&nChannel=Polls
http://localhost/dUpro/home/../Products/detail.asp?iData=9&iCat='SQL_ERR
ORS&iChannel=8&nChannel=Products
http://localhost/dUpro/home/../Topics/cat.asp?iCat=465&iChannel=16&nChan
nel='SQL_ERRORS
http://localhost/dUpro/home/../Topics/default.asp?iChannel=16&nChannel='
SQL_ERRORS
http://localhost/dUpro/home/../Topics/detail.asp?iData=29&iCat=478&iChan
nel=16&nChannel='SQL_ERRORS
http://localhost/dUpro/home/members.asp?iMem='SQL_ERRORS
http://localhost/dUpro/home/toppages.asp?offset='SQL_ERRORS
http://localhost/dUpro/includes/../home/members.asp?iMem='SQL_ERRORS
http://localhost/dUpro/Pictures/../events/default.asp?iChannel=6&nChanne
l=Events&iDate='SQL_ERRORS
http://localhost/dUpro/Pictures/../home/members.asp?iMem='SQL_ERRORS
http://localhost/dUpro/Pictures/../polls/result.asp?iData=74&iCat=254&iC
hannel=15&nChannel='SQL_ERRORS
http://localhost/dUpro/Pictures/../polls/result.asp?iData=74&iCat='SQL_E
RRORS&iChannel=15&nChannel=Polls
http://localhost/dUpro/Pictures/../Topics/default.asp?iChannel=16&nChann
el='SQL_ERRORS
http://localhost/dUpro/polls/../polls/../events/default.asp?iChannel=6&n
Channel=Events&iDate='SQL_ERRORS
http://localhost/dUpro/polls/../polls/../home/members.asp?iMem='SQL_ERRO
RS
http://localhost/dUpro/polls/../polls/../polls/result.asp?iData=74&iCat=
254&iChannel=15&nChannel='SQL_ERRORS
http://localhost/dUpro/polls/../polls/../polls/result.asp?iData=74&iCat=
'SQL_ERRORS&iChannel=15&nChannel=Polls
http://localhost/dUpro/polls/../polls/../Topics/default.asp?iChannel=16&
nChannel='SQL_ERRORS
http://localhost/dUpro/Topics/../home/members.asp?iMem='SQL_ERRORS
http://localhost/dUpro/Topics/../home/search.asp?keyword='SQL_ERRORS&iCh
annel=
http://localhost/dUpro/Topics/../polls/result.asp?iData=74&iCat=254&iCha
nnel=15&nChannel='SQL_ERRORS
http://localhost/dUpro/Topics/../polls/result.asp?iData=74&iCat='SQL_ERR
ORS&iChannel=15&nChannel=Polls
http://localhost/dUpro/Topics/../topics/cat.asp?iCat=483&iChannel=16&nCh
annel='SQL_ERRORS
http://localhost/dUpro/Topics/../topics/default.asp?iChannel=16&nChannel
='SQL_ERRORS
http://localhost/dUpro/Topics/../Topics/default.asp?iChannel=16&nChannel
='SQL_ERRORS
http://localhost/dUpro/Topics/../topics/detail.asp?iData=28&iCat=479&iCh
annel=16&nChannel='SQL_ERRORS
Possible Fixes: The usage of htmlspeacialchars(), mysql_escape_string(), mysql_real_escape_string() and other functions for input validation before passing user input to the mysql database, or before echoing data on the screen, would solve these problems.
Keep your self updated, Rss feed at: http://digitalparadox.org/rss.ah
Author:
These vulnerabilties have been found and released by Diabolic Crab, Email: dcrab[AT|NOSPAM]hackerscenter[DOT|NOSPAM]com, please feel free to contact me regarding these vulnerabilities. You can find me at, http://www.hackerscenter.com or http://digitalparadox.org/. Lookout for my soon to come out book on Secure coding with php.
[ reply ]