Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

[Wooyun]German Nutrition Society website Sql injection
From: "Wooyun.org" <help.en () wooyun org>
Date: Thu, 17 Oct 2013 00:01:45 +0800

*Abstract:*

German Nutrition Society website Sql injection

*Details:*

PHP-Nuke 'sid' Parameter SQL Injection Vulnerability

http://www.dge.de/modules.php?name=News&file=article&sid=914

*Proofs of concept:*
*[image: 内嵌图片 1]
*

_______________________________________________


Form: http://en.wooyun.org/bugs/wooyun-2013-02
Author: Finger <http://en.wooyun.org/whitehats/Finger>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

  By Date           By Thread  

Current thread:
  • [Wooyun]German Nutrition Society website Sql injection Wooyun.org (Oct 16)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]