From: "???? ????" <mr_snake_my@hotmail.com.>
To: [email protected]Subject: SQL injection in Invision Power Board v2.1.5
Date: Mon, 06 Mar 2006 22:16:35 +0000
Mime-Version: 1.0
Content-Type: text/plain; format=flowed
X-OriginalArrivalTime: 06 Mar 2006 22:16:39.0163 (UTC) FILETIME=[A3C65CB0:01C6416B]
X-Virus-Scanned: antivirus-gw at tyumen.ru
SQL injection in Invision Power Board v2.1.5
Software: Invision Power Board
Web Site : http://forums.invisionpower.com
Versions: v2.1.5
Type: SQL Injection
Class: Remote
example :
http://www.victem.com/forum/index.php?showtopic=[anytopic]&pid=1&st=-1[sql]
Discovered by : Mr.SNAKE
GreeTz : greetz to all my freind in www.lezr.com
_________________________________________________________________
Don't just search. Find. Check out the new MSN Search!
http://search.msn.click-url.com/go/onm00200636ave/direct/01/