full-disclosure - PoC for the 2 new WMF vulnerabilities (DoS)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <BAY19-DAV4790B1D7E3E72DAE43AACD9250@phx.gbl>
Date: Tue Jan 10 10:06:53 2006
From: se_cur_ity at hotmail.com (Morning Wood)
Subject: PoC for the 2 new WMF vulnerabilities (DoS)

>Michael Bringle
>Director of Engineering
>PivX Solutions, Inc.
>http://www.pivx.com/HomeOffice/

i made a booboo and accidentaly put a ' in your url ( sorry, its right next
to the enter key )
couldnt help but notice this tho...

http://www.pivx.com/Labs/ThreatCenter.asp?sortby=threat_name'

Microsoft OLE DB Provider for ODBC Drivers error '80040e14'
You have an error in your SQL syntax. Check the manual that corresponds to
your MySQL server version for the right syntax to use near '' desc' at line
1
/Labs/ThreatCenter.asp, line 84

http://www.pivx.com/Labs/ThreatCenter.asp?sortby='threat_name

Microsoft OLE DB Provider for ODBC Drivers error '80040e14'
You have an error in your SQL syntax. Check the manual that corresponds to
your MySQL server version for the right syntax to use near ''threat_name
desc' at line 1
/Labs/ThreatCenter.asp, line 84

i am secure in the fact that you dont protect web-apps with your products
!!!
KEEP UP THE SELF PROMOTION !!! YOU ROCK !!! YOUR PRODUCTS WILL SAVE US ALL
!!!
*sigh*