|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
SQL injection in phpWebThing 1.4.4
A.1.M
Hotmail.com
Date: Fri Nov 11 2005 - 05:45:49 CST
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Vulnerable: phpWebThings 1.4.4
website : http://phpwebthings.org
The bug in download.php
ThE Exploit :
http://www.target.com/download.php?file=|SQL
ThE Error:
You have an error in your SQL syntax. Check the manual that corresponds to your MySQL server version for the right syntax to use near 'order by date DESC' at line 1
AhLaM
http://www.lezr.com/vb
Best Regards ,,,
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]