• info
• discussion
• exploit
• solution
• references

APT-webshop Modules.PHP Multiple SQL Injection Vulnerabilities


This issue can be exploited through a web client.

http://www.example.com/modules.php?warp=artikel&group=[SQL]
http://www.example.com/modules.php?warp=artikel&group=&seite=[SQL]
http://www.example.com/modules.php?warp=artikel&group=&seite=&id=[SQL]