Re: SQL Injection in SaphpLesson2.0 "show.php"

To: Sw33t.h4cK3r@xxxxxxxxxxx
Subject: Re: SQL Injection in SaphpLesson2.0 "show.php"
From: security curmudgeon <jericho@xxxxxxxxxxxxx>
Date: Sun, 2 Dec 2007 04:08:03 +0000 (UTC)
Cc: bugtraq@xxxxxxxxxxxxxxxxx
In-reply-to: <20070704070300.23571.qmail@xxxxxxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
References: <20070704070300.23571.qmail@xxxxxxxxxxxxxxxxx>

: Discovery by:- Sw33t h4cK3r
: 
: POWERED BY: SaphpLesson2.0
: --------------------------
: 
: Exploit :
: http://Example.com/show/show.php?lessid=[SQL]

Discovered 2006-05-27
http://archives.neohapsis.com/archives/bugtraq/2006-05/0610.html

References:
- SQL Injection in SaphpLesson2.0 "show.php"
  - From: Sw33t . h4cK3r

Prev by Date: sing (debian) vunlerability?
Next by Date: McAfee SecurityCenter Privacy Service HTML Execution Vulnerability
Previous by thread: SQL Injection in SaphpLesson2.0 "show.php"
Next by thread: Multiple Remote unauthenticated stack overflows in Asterisk chan_sip.c
Index(es):
- Date
- Thread