[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <002501c392ad$334d5750$050010ac@Estila>
From: lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro)
Subject: NASA.GOV SQL Injections
Hi all again,
http://liftoff.msfc.nasa.gov/toc.asp?s=Tracking'
admits sql characters injection but seems not easy to include successful
queries
security of nasa websites sucks ( sucks the web app security...)
best regards,
-------------------------------
0x00->Lorenzo Hernandez Garcia-Hierro
0x01->/* not csh but sh */
0x02->$ PATH=pretending!/usr/ucb/which sense
0x03-> no sense in pretending!
__________________________________
PGP: Keyfingerprint
4ACC D892 05F9 74F1 F453 7D62 6B4E B53E 9180 5F5B
ID: 0x91805F5B
**********************************
No Secure Root Group Security Research Team
http://www.nsrg-security.com
______________________
Powered by blists - more mailing lists