Re: Sql injection in jPortal version 2.3.1 (module banner)

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: Sql injection in jPortal version 2.3.1 (module banner)
From: anonymous@xxxxx
Date: 12 Jun 2005 21:22:45 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

"After that, You gain login and password of administrator."

Bull shit.
In 2.3.1 version an admin password is "hashed". You gain 
"f95aead0f1f7481cf4d4acfe61c10fce" instaed password.

Follow-Ups:
- Re: Sql injection in jPortal version 2.3.1 (module banner)
  - From: exon

Prev by Date: [OpenPKG-SA-2005.007] OpenPKG Security Advisory (cvs)
Next by Date: [OpenPKG-SA-2005.009] OpenPKG Security Advisory (gzip)
Previous by thread: Sql injection in jPortal version 2.3.1 (module banner)
Next by thread: Re: Sql injection in jPortal version 2.3.1 (module banner)
Index(es):
- Date
- Thread