[BeggFoMercy]

[img]http://www.eurekalert.org/doe/images/home-head-logo.jpg[/img]

Alexa Rank :
Spoiler (Click to View)

PHP Code


<?php 
Alexa Traffic Rank: 17,810 United States Flag Traffic Rank in US: 5,831
link-icon Sites Linking In: 16,294 


Hello , I've Found a POST SQL injection on U.S. Department Of Energy . , I didn't feel like exploiting it , So I though i would share it with you guys here .

Spoiler (Click to View)

POST Details : Spoiler (Click to View)

PHP Code


<?php 
frompage=&username=%27&password=%27 


[~!White!~]

Nice, I also have an SQL vuln on doe.gov

Spoiler (Click to View)

[Toasties]

you should report this to the site admin, not leek it here.
you could get a bounty :D

[BeggFoMercy]

you should report this to the site admin, not leek it here.
you could get a bounty :D

I'll get to write the email to the administrator once i get some spare time . Thanks for the feed back .

[Flaaffy]

oh wow, you guiz must be l33t as fuck. have fun getting raped in the shower

[BeggFoMercy]

oh wow, you guiz must be l33t as fuck. have fun getting raped in the shower

Oh wow so you are that guy that dosn't respect any one, oh so you must be so pro and a l33tpr0ub3rhax0rZ ?

[SoLong]

good job on finding a SQLi on a department of energy website.