|
|
Expinion.net Member Management System ID Parameter SQL Injection Vulnerability
No exploit is required. The following proof of concept has been provided: http://www.example.com/resend.asp?ID=[SQL query] http://www.example.com/news_view.asp?ID=[SQL query] |
|
Privacy Statement |