phpMyQuote Index.PHP SQL Injection and Cross-Site Scripting Vulnerabilities

To exploit a cross-site scripting vulnerability, an attacker entices an unsuspecting victim to follow a malicious URI. The attacker can exploit SQL-injection vulnerabilities through a browser.

The following proof-of-concept URIs are available:

http://example.com/script_path/index.php?action=edit&id=[Sql injection]
http://example.com/script_path/index.php?action=edit&id=[XSS]


 

Privacy Statement
Copyright 2010, SecurityFocus