Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

[eVuln] Skull-Splitter's PHP Downloadcounter for Wallpapers SQL Injection

[eVuln] Skull-Splitter's PHP Guestbook XSS Vulnerability

XSS in PHPKIT Version 1.6.03

[SA19443] PHP Script Index "search" Cross-Site Scripting Vulnerability

From:	Cyber Lords <fear_(at)_cyberlords.net>
Date:	29.03.2006
Subject:	Sql-injection in RW: Download V 4.0.5

Advisory: Sql-injection in RW: Download V 4.0.5

Уязвимый скрипт/Vulnerable script: index.php

SQL-inlections:

http://www.strategycore.co.uk/files/index.php?cid='
http://www.strategycore.co.uk/files/index.php?dlid='
http://www.strategycore.co.uk/files/index.php?ACT=dl&id='

Раскрытие установочного пути/Exposure of installation path :

http://www.strategycore.co.uk/files/index.php?ACT='

--------------------------
Cyber Lords Team
www.cyberlords.net  

--
Best regards,
fear                          mailto:fear@cyberlords.net