|
Multiple DuWare Products Detail.ASP Multiple SQL Injection Vulnerabilities
An attacker can exploit these issue with a web client. The following proof-of-concept URIs are available: http://www.example.com/detail.asp?iPro=196&iType=[SQL Injection] http://www.example.com/detail.asp?iNews=[SQL Injection] http://www.example.com/detail.asp?iType=[SQL Injection] http://www.example.com/detail.asp?iFile=[SQL Injection] http://www.example.com/detail.asp?action=[SQL Injection] |
|
|
Privacy Statement |
