• info
• discussion
• exploit
• solution
• references

CGILua 'sid' Parameter SQL Injection Vulnerability

An attacker can exploit this issue using a web browser.

The following exploit URL is available:

http://www.example.com/publique/cgi/cgilua.exe/sys/start.htm?sid=[SQL INJECTION]