|
EdgePHP CBQuick 'search' Parameter SQL Injection and Cross Site Scripting Vulnerabilities
An attacker can exploit these issues via a browser. To exploit a cross-site scripting issue, the attacker must entice an unsuspecting victim to follow a malicious URI. The following example URIs are available: http://www.example.com/index.php?search=[SQLI] http://www.example.com/index.php?search=[XSS] |
|
Privacy Statement |