• info
• discussion
• exploit
• solution
• references

Multiple AJ Square Products SQL Injection Vulnerabilities

An attacker can exploit these issues with a web client.

The following proof-of-concept exploits are available:

• /data/vulnerabilities/exploits/AJDating_rexp_SQL.html
• /data/vulnerabilities/exploits/AJ Auction_rexp_SQL.pl
• /data/vulnerabilities/exploits/AJ Classifieds_rexp_SQL.html
• /data/vulnerabilities/exploits/AJForum_rexp_SQL.pl