• info
• discussion
• exploit
• solution
• references

PHPWebThings Download.PHP File Parameter SQL Injection Vulnerability

The following example was provided to demonstrate the vulnerability:

http://www.example.com/download.php?file=|SQL