Full Disclosure: SQL injection on the UN website

SQL injection on the UN website

From: Sihan <sihanzheng () gmail com>
Date: Sun, 29 May 2011 21:50:47 -0400

Just saw this earlier:
http://www.un.org/chinese/News/archive.asp?month=5&year=2010&apos;

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

By Date By Thread

Current thread:

Online Base64 Decoder & Encoder with ASCII/Hex Output SecurityXploded Group (May 26)
- Re: Online Base64 Decoder & Encoder with ASCII/Hex Output Nick FitzGerald (May 26)
  - Re: Online Base64 Decoder & Encoder with ASCII/Hex Output Peter Ferrie (May 27)
  - Re: Online Base64 Decoder & Encoder with ASCII/Hex Output Peter Ferrie (May 27)
- Re: Online Base64 Decoder & Encoder with ASCII/Hex Output Cal Leeming (May 27)
  - Re: Online Base64 Decoder & Encoder with ASCII/Hex Output Cal Leeming (May 27)
    - Re: Online Base64 Decoder & Encoder with ASCII/Hex Output Jeffrey Walton (May 28)
    - Re: Online Base64 Decoder & Encoder with ASCII/Hex Output Cal Leeming (May 28)
    - Re: Online Base64 Decoder & Encoder with ASCII/Hex Output Jeffrey Walton (May 28)
    - XYZ Password recovery tool from securityxploded.com by Nagareshwar fulldisclosure (May 29)
    - SQL injection on the UN website Sihan (May 30)
    - Re: SQL injection on the UN website MG (May 30)