Re: modules name(Sections)SQL Injection Exploit

To: Mster-X@xxxxxxxxxxx
Subject: Re: modules name(Sections)SQL Injection Exploit
From: security curmudgeon <jericho@xxxxxxxxxxxxx>
Date: Sun, 21 May 2006 21:43:24 -0400 (EDT)
Cc: bugtraq@xxxxxxxxxxxxxxxxx
In-reply-to: <20060505013852.2890.qmail@xxxxxxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
References: <20060505013852.2890.qmail@xxxxxxxxxxxxxxxxx>

: ********************
: By: Mr-X
: Email: Mster-X@xxxxxxxxxxx
: Subject: modules name(Sections)SQL Injection 
: ********************
: 
: example:-
: /modules.php?name=Surveys&op=results&pollID=8&mode=&order=&thold=[SQL]

What product is this in? Searching for "modules name sections" is not that 
helpful.

References:
- modules name(Sections)SQL Injection Exploit
  - From: Mster-X

Prev by Date: Skype - URI Handler Command Switch Parsing
Next by Date: Re: tseekdir.cgi<--Local File Include
Previous by thread: modules name(Sections)SQL Injection Exploit
Next by thread: RE: modules name(Sections)SQL Injection Exploit
Index(es):
- Date
- Thread