Wired Community Software WWWThreads 5.0 - SQL Command Input

Wired Community Software WWWThreads 5.0 - SQL Command Input source: https://www.securityfocus.com/bid/967/info WWWThreads is a web bulletin board program that uses an SQL backend. Due to incomplete input validation, it is possible for an attacker to submit SQL commands through forms and manipulat...

Wired Community Software WWWThreads 5.0 - SQL Command Input

source: https://www.securityfocus.com/bid/967/info WWWThreads is a web bulletin board program that uses an SQL backend. Due to incomplete input validation, it is possible for an attacker to submit SQL commands through forms and manipulate the contents of the database to gain administrator...

rfp2k01.txt

-- Advisory RFP2K01 ------------------------------ rfp.labs ------------ "How I hacked PacketStorm" A look at hacking wwwthreads via SQL ------------------------------- rain forest puppy / [email protected] --- Table of contents: -1. Scope of problem -2. Long explaination of SQL hacking -3. Soluti...