PlanetCreator.Net’s Security Team Member has reported another critical XSS vulnerability on Accounts Chamber of the Russian Federation http://www.ach.gov.ru
These are some information from Vulneral Site http://www.ach.gov.ru:
This vulnerability has been informed to webmaster.
Vulnerability Link is as follow http://www.ach.gov.ru/
We hope that your security staff will look into this issue and fix it as soon as possible.
PlanetCreator reported another Critical SQL injection (vulnerability) on All About Myanmar (Beta) URL : http://www.allaboutmyanmar.com/ SQL injection is a code injection technique that exploits a security vulnerability occurring in the
sqlmap (http://sqlmap.sourceforge.net/) Full support: MySQL, Oracle, PostgreSQL and Microsoft SQL Server. Partially supported: Microsoft Access, DB2, Informix, Sybase and Interbase. SQL Power Injector (http://www.sqlpowerinjector.com/) Implemented support for: Microsoft SQL Server,
This will not be very long, nor will I go into excessive amounts of detail into the tools and steps required. The purpose of this paper is simply to help