Waraxe IT Security Portal

Pi3cH · Replies: 0

hi there

i have some question about below queries, could some one explain(analyze) them for me?

these queries use for blind sql injection.
1. AND (SELECT COUNT(name) FROM sysobjects ...

Pi3cH · Replies: 3

oh! i dont see the left part of =,

could you give live example?

Pi3cH · Replies: 3

could give me live example?

the $curpage limited at this line of code:
$curpage = ceil(($current) / 50);

Pi3cH · Replies: 3

oh! advisory reportet by you Smile

!

yes htmlspecialchars good solution.

is there any bug for this function of php? (nowdays many webapplications use it)

Pi3cH · Replies: 3

use:
<IMG SRC="jav	ascript:alert('XSS');"

i think the preg_match only search for < ends with > if we use tags with out > all of them works properly:

& ...

Pi3cH · Replies: 2

xss virus! cool Smile

it's act like others viruses with many limitation and also many future (platform independent, depend on 2 side)

thanks LINUX

Pi3cH · Replies: 0

hi there

i think u hear about HTML Injection or Script inection attacks, but they are type of XSS attack. you think so?

for example if something injected into HTML source code they (securityfocu ...