bugtraq - Re: modules name(Downloads)SQL Injection Exploit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <Pine.LNX.4.44.0605072242180.557-100000@bugsbunny.castlecops.com>
Date: Sun, 7 May 2006 22:42:51 -0400 (EDT)
From: Paul Laudanski <zx@...tlecops.com>
To: Mster-X@...mail.com
Cc: bugtraq@...urityfocus.com
Subject: Re: modules name(Downloads)SQL Injection Exploit


What application are you talking about?

On 5 May 2006 Mster-X@...mail.com wrote:

> ********************
> By: Mr-X
> Email: Mster-X@...mail.com
> Subject: modules name(Downloads)SQL Injection 
> ********************
> 
> example:-
> /modules.php?/modules.php?name=Downloads&d_op=viewdownload&cid=[SQL]
> 
> ********************
> 

-- 
Paul Laudanski, Microsoft MVP Windows-Security
Submit phish: www.castlecops.com/pirt
[de] http://de.castlecops.com
[en] http://castlecops.com
[wiki] http://wiki.castlecops.com