gNews Publisher SQL Injection Vulnerabilites
Date: 20 Nov 2006 07:38:33 -0000
From: Advisory@aria-security.net
To: bugtraq@securityfocus.com
Subject: gNews Publisher SQL Injection Vulnerabilites
X-Virus-Scanned: antivirus-gw at tyumen.ru
Aria-Security's Research Team>
#<www.Aria-Security.Com For further help>
#Original Advisory at:
#http://www.aria-security.com/forum/showthread.php?t=37
#-----------------------------------------
#
#Software: gNews Publisher
#Vendor: http://gazatem.com
#Method: SQL Injection
#
#Poc:
#
#http://target/categories.asp?catID=[SQL Injection]
#http://target/categories.asp?editorID=[SQL Injection]
#
#Contact Us:
#Advisory@Aria-Security.net