Aigaion 1.2.1 - DIR Remote File Inclusion

Aigaion 1.2.1 - DIR Remote File Inclusion Software:Web based bibliography management system Download link: http://sourceforge.net/projects/aigaion/ script:basicfunctions.php author: navairum...

Y.A.N.S sql injection

Product: YANS yet another news system Link: http://sourceforge.net/projects/yans/ vuln code: $resultado = mysqlquery"SELECT FROM users WHERE username='$username' AND password='$password'" or die mysqlerror; simple sql injection ' or '1=1 ' or '1=1 -navairum...