LXer: Hlstats "killLimit" Parameter Handling Remote SQL Query Injection ...

		LinuxQuestions.org > Forums > Linux Forums > Linux - News > Syndicated Linux News
LXer: Hlstats "killLimit" Parameter Handling Remote SQL Query Injection ...

Syndicated Linux News This forum is for the discussion of Syndicated Linux News stories.

Notices

Welcome to LinuxQuestions.org, a friendly and active Linux Community.

You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!

Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.

Are you new to LinuxQuestions.org? Visit the following links:
Site Howto | Site FAQ | Sitemap | Register Now

If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.

Having a problem logging in? Please visit this page to clear all LQ-related cookies.

Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.

Exclusive for LQ members, get up to 45% off per month. Click here for more info.

Search this Thread

12-29-2006, 07:54 PM	#1
LXer LXer NewsBot Registered: Dec 2005 Posts: 128,373 Rep:	LXer: Hlstats "killLimit" Parameter Handling Remote SQL Query Injection ... Published at LXer: A vulnerability has been identified in HLstats, which could be exploited by attackers to execute arbitrary SQL commands. This issue is due to an input validation error in the "hlstats.php" script that does not validate the "killLimit" parameter before being used in SQL statements, which could be exploited by malicious users to conduct SQL injection attacks. Read More...

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is On HTML code is Off Forum Rules

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
LXer: Gnu Tar "GNUTYPE_NAMES" Record Handling Directory Traversal ...	LXer	Syndicated Linux News	0	11-28-2006 05:54 AM
LXer: Sql Injection Weaknesses Found in Mambo, Joomla	LXer	Syndicated Linux News	0	06-28-2006 04:33 AM
LXer: MySQL addresses SQL injection vulnerability	LXer	Syndicated Linux News	0	06-02-2006 07:54 AM
LXer: PostgreSQL addresses SQL injection vulnerabilities	LXer	Syndicated Linux News	0	05-24-2006 09:21 PM
LXer: Sql Injection Vulnerability	LXer	Syndicated Linux News	0	01-24-2006 03:16 PM

All times are GMT -5. The time now is 02:56 AM.

Main Menu

(Con't)

My LQ

Write for LQ

LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.

Main Menu

Syndicate

Latest Threads

LQ News

Twitter: @linuxquestions