info
discussion
exploit
solution
references
Hobosworld HobSR Multiple SQL Injection Vulnerabilities
No exploit is required.
The following proof of concept URI are available:
http://www.example.com/view.php?arrange=[SQL]
http://www.example.com/view.php?p=[SQL]
Privacy Statement
Copyright 2010, SecurityFocus
