bugtraq - Re: Re: Aria-Security.net: NetAuctionHelp SQL Injection

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Thu, 6 Dec 2007 00:40:14 -0800 (PST)
From: NetAuctionHelp Support <support@...auctionhelp.com>
To: bugtraq@...urityfocus.com
Subject: Re: Re: Aria-Security.net: NetAuctionHelp SQL Injection


Thank you for finding this out. This is issue has been fixed and applied to
our NetAuctionHelp software and Classified Ads software as well as our
customers using it.

NetAuctionHelp Support Team




no-reply-15 wrote:
> 
> Hello, 
> 
> I got you another one,
> 
> there's the same problem with your admin page. just try 'having 1=1-- as
> user login. 
> 
> 
> 
> Regards, 
> 
> The-0utl4w
> 
> 
> 
> 
> 
> P.S: see our Advisory on your other product (ads)
> 
> 

-- 
View this message in context: http://www.nabble.com/Aria-Security.net%3A-NetAuctionHelp-SQL-Injection-tf4857189.html#a14188418
Sent from the Bugtraq mailing list archive at Nabble.com.