<<< Date Index >>> <<< Thread Index >>>

SQL Injection in saphp "showcat.php"

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: SQL Injection in saphp "showcat.php"
From: Sw33t.h4cK3r@xxxxxxxxxxx
Date: 4 Jul 2007 07:09:28 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

Discovery by :- Sw33t h4cK3r
powered by : saphp
----------------------------

Exploit :
http://Example.com/story/showcat.php?forumid=[SQL]

Follow-Ups:
- Re: SQL Injection in saphp "showcat.php"
  - From: security curmudgeon

Prev by Date: Re: Remote File Include In Script SoftNews Media Group
Next by Date: Fujitsu-Siemens ServerView Remote Command Execution
Previous by thread: Re: MySQLDumper vulnerability: Bypassing Apache based access control possible
Next by thread: Re: SQL Injection in saphp "showcat.php"
Index(es):
- Date
- Thread