[<prev] [next>] [day] [month] [year] [list]
Message-ID: <20060321222246.23911.qmail@securityfocus.com>
Date: 21 Mar 2006 22:22:46 -0000
From: dabdoub_mosikar@...islam.com
To: bugtraq@...urityfocus.com
Subject: Mini-Nuke<=1.8.2 SQL injection (6)
//mini-nuke board turk have many sql injection founded by Moroccan Security
Team
//Creetz to: Moroccan Security Team
[Dr.E-vil,Dr.Erase,H0550N,|ucifer,DaBDouB-MoSiKaR [OverclockiX],ki11er]
,Dranzelz,Esp!onLeRaVaGe,ameer,www.lezr.com and all muslim [morocco]
[1]
http://[target]/members.asp?action=member_details&uid=|sql|
[2]
http://[target]/articles.asp?action=articles&catid=|sql|
[3]
http://[target]/hpages.asp?id=|sql|
[4]
http://[target]/programs.asp?action=programs&catid=|sql|
[5]
http://[target]/forum.asp?action=Topics&id=|sql|
[6]
http://[target]/pages.asp?id=|sql|
/////////////////////////////////////////////////////////////////
Help table name
Columns of members
sifre=password md5
uye_id = userid
g_soru = secret question.
g_cevap = secret answer
email = mail address
isim = name
//////////////////////////////////////////////////////////////////
Powered by blists - more mailing lists