Related information

Web applications security vulnerabilities (PHP, ASP, CGI, Perl, etc)

File Including In PBLang

[SA17333] phpESP Unspecified Cross-Site Scripting and SQL Injection

[SA17353] gCards "limit" SQL Injection Vulnerability

[Full-disclosure] Multiple vulnerabilities within RockLiffe MailSite Express WebMail

From:	almaster_(at)_hotmail.com <almaster_(at)_hotmail.com>
Date:	24.10.2005
Subject:	DBoardGear SQL Injection

DboardGear ..
Search By Google :-
by DboardGear

Gr33tz :-
        aLMaSTeR HaCKeR .. SQL Injection's FOunder   - | almaster@hotmail.com|-
        Security4Arab .. A'Where Home ..

1- SQL Injection in buddy.php
http://www.site.com/dboard/buddy.php?action=add&buddy=|aLMaSTeR

2-SQL Injection in u2a.php
http://www.site.com/dboard/u2u.php?action=view&u2uid=|aLMaSTeR

Error:
You have an error in your SQL syntax near '' at line 1