bugtraq - Re: Re: Aria-Security.net: NetAuctionHelp SQL Injection

lists.openwall.net		lists / announce john-users owl-users popa3d-users / xvendor oss-security / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4
Open Source and information security mailing list archives

This website is powered by Openwall GNU/*/Linux security-enhanced OS

[<prev] [next>] [<thread-prev] [month] [year] [list]

Date: Thu, 6 Dec 2007 00:40:14 -0800 (PST)
From: NetAuctionHelp Support <support@...auctionhelp.com>
To: bugtraq@...urityfocus.com
Subject: Re: Re: Aria-Security.net: NetAuctionHelp SQL Injection


Thank you for finding this out. This is issue has been fixed and applied to
our NetAuctionHelp software and Classified Ads software as well as our
customers using it.

NetAuctionHelp Support Team




no-reply-15 wrote:
> 
> Hello, 
> 
> I got you another one,
> 
> there's the same problem with your admin page. just try 'having 1=1-- as
> user login. 
> 
> 
> 
> Regards, 
> 
> The-0utl4w
> 
> 
> 
> 
> 
> P.S: see our Advisory on your other product (ads)
> 
> 

-- 
View this message in context: http://www.nabble.com/Aria-Security.net%3A-NetAuctionHelp-SQL-Injection-tf4857189.html#a14188418
Sent from the Bugtraq mailing list archive at Nabble.com.