AOH :: HP Unsorted Nums :: B06-5118.HTM

4images SQL Injection
SQL injection - 4images
SQL injection - 4images


4images 1.7.x 

SQL injection

- SQL injection can be used to obtain password hash
- for version 1.7.3, you must log in as a registered user


Original advisory with exploit script (requires registration): 


The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2015 AOH
We do not send spam. If you have received spam bearing an email address, please forward it with full headers to