Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Ablespace 1.0 'cat_id' Parameter SQL Injection Vulnerability May 25 2008 09:01AM
a jasbi yahoo com
By : s3rv3r_hack3r (Ali Jasbi)

Vendor : abk-soft.com

Name : ablespace

version : All Version

Risk : Very high

++++++++++++++++++++++++++++++++++++++++++++

adv_cat.php >>>

if(!empty($_GET['cat_id'])){

$str = '';

DB::query("select * from adv_cats where id=".to_sql(get_param('cat_id'),"Number"...

[ more ]  




 

Privacy Statement
Copyright 2009, SecurityFocus