Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

[SA18471] WP-Stats WordPress Plug-in "author" SQL Injection Vulnerability

[SA18469] Netbula Anyboard "tK" Cross-Site Scripting Vulnerability

[SA18470] GTP iCommerce Cross-Site Scripting Vulnerabilities

[SA18472] Widexl Download Tracker "ID" Parameter Cross-Site Scripting

From:	:) :) <liz0_(at)_bsdmail.com>
Date:	16.01.2006
Subject:	WHITEAlbum Sql Injection

WHITEAlbum Sql Injection

Website:http://whiteangle.com/

-------------------------------------------------------------------
exploit :

http://[victim]/folder/pictures.php?dir=[SQL]

-------------------------------------------------------------------
Credit:Liz0ziM
mail:liz0@bsdmail.com
www.biyosecurity.be , www.biyo.tk

Gretz:wannacut,The_Bekir,Codexploder'tq,furtivo,R00t3rr0r,disconnect,
cyberlord and all friend

-------------------------------------------------------------------
Google:"PHP Album by whiteangle"

--------------------------------------------------------------------
source:

http://www.biyosecurity.be/bugs/whitealbum.txt

http://www.blogcu.com/Liz0ziM/196167/

--
_______________________________________________
Get your free email from http://mymail.bsdmail.com