<<< Date Index >>> <<< Thread Index >>>

SQL Injection in SaphpLesson2.0 "show.php"

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: SQL Injection in SaphpLesson2.0 "show.php"
From: Sw33t.h4cK3r@xxxxxxxxxxx
Date: 4 Jul 2007 07:03:00 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

Discovery by:- Sw33t h4cK3r

POWERED BY: SaphpLesson2.0
--------------------------

Exploit :
http://Example.com/show/show.php?lessid=[SQL]

Follow-Ups:
- Re: SQL Injection in SaphpLesson2.0 "show.php"
  - From: security curmudgeon

Prev by Date: Fujitsu-Siemens PRIMERGY BX300 Switch Blade Information Disclosure
Next by Date: Multiple Remote unauthenticated stack overflows in Asterisk chan_sip.c
Previous by thread: Fujitsu-Siemens PRIMERGY BX300 Switch Blade Information Disclosure
Next by thread: Re: SQL Injection in SaphpLesson2.0 "show.php"
Index(es):
- Date
- Thread