Bugtraq mailing list archives

SQL INJECTION in DLMan Pro. PHPBB Mod.

From: rock master <rock_mask () hotmail com>
Date: 4 Apr 2005 23:31:19 -0000



SQL Injection was found in the Variable $file_id in : DLMan Pro' Mod
vulnerable system :
phpBB 2.0.x 
exploit :
dlman.php?func=file_info&file_id='[SQL Injection]


Bug Found by : LovER BOY

SecurityGurus Team
www.securitygurus[d0t]Net

Current thread:

SQL INJECTION in DLMan Pro. PHPBB Mod. rock master (Apr 05)