Confixx 3.1.2 <= SQL Injection

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Confixx 3.1.2 <= SQL Injection
From: sn4k3.23@xxxxxxxxx
Date: 11 Apr 2006 21:05:23 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

// Confixx 3.1.2 <= SQL Injection //

-----------------------------------------------------------------

[~] Advisory by: LoK-Crew ~ Snake_23


[-] Exploit: http://www.victim.com/user/index.php?SID=[SQL]

[-] Googledork: inurl:confixx inurl:login|anmeldung

[+] Greetz to: Bluegeek and Team.Rootbox
[+] Visit: www.LoK-Crew.de.am

Prev by Date: [eVuln] VNews Multiple Vulnerabilities
Next by Date: IBM
Previous by thread: [eVuln] VNews Multiple Vulnerabilities
Next by thread: Re: Confixx 3.1.2 <= SQL Injection
Index(es):
- Date
- Thread