Full Disclosure mailing list archives
Autentificator v2.01 SQL Injection Vulnerabilty
From: SirDarckCat <sirdarckcat () gmail com>
Date: Fri, 1 Sep 2006 19:43:31 -0500
Discovered by Sirdarckcat from elhacker.net ------------------------------------------------------------------------------------ Autentificator v2.01 SQL Injection http://www.hotscripts.com/Detailed/15291.html ------------------------------------------------------------------------------------ Autentificator is a simple PHP based program for helping administrators to controll access to certain pages. It suffers of a SQL Injection vulnerability. ------------------------------------------------------------------------------------ PoC: http://autentificator/aut_verifica.inc.php POST DATA: user='+[SQL]&pass=something ------------------------------------------------------------------------------------ Att. Sirdarckcat elhacker.net -- Att. SirDarckCat () GMail com http://www.google.com/search?q=sirdarckcat
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Autentificator v2.01 SQL Injection Vulnerabilty SirDarckCat (Sep 01)