what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

Files

Phorum347SQL.pl

Posted Apr 18, 2004

Authored by Janek Vind aka waraxe | Site waraxe.us

Remote exploit that makes use of a SQL injection vulnerability in Phorum version 3.4.7.

tags | exploit, remote, sql injection

SHA-256 | 9f4cf79038884aae5dcd94f78963562f26d6d2bddc3d43b27874e515c90298cb

Download | Favorite | View

Related Files

waraxe-2004-SA019.txt

Posted Apr 18, 2004

Authored by Janek Vind aka waraxe | Site waraxe.us

A critical SQL injection bug exists in Phorum version 3.4.7 that allows a remote attacker to view sensitive data. The problem code lies in userlogin.php.

tags | advisory, remote, php, sql injection

SHA-256 | 9a6afe98513c69946e7f30f31b5b192c8e6123e0b8371ba1df208f890ff5610d

Download | Favorite | View