OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: SQL Injection in saphp "showcat.php"

From: security curmudgeon (jerichoattrition.org)
Date: Sat Dec 01 2007 - 22:07:27 CST


: Discovery by :- Sw33t h4cK3r
: powered by : saphp
: ----------------------------
:
: Exploit :
: http://Example.com/story/showcat.php?forumid=[SQL]

Discovered 2005-10-24
http://archives.neohapsis.com/archives/bugtraq/2005-10/0275.html

Discovered 2006-04-12
http://archives.neohapsis.com/archives/bugtraq/2006-04/0262.html