• info
• discussion
• exploit
• solution
• references

Cells Blog SQL Injection and Cross Site Scripting Vulnerabilities

Attackers can use a browser to exploit these issues. To exploit the cross-site scripting issue, an attacker must entice an unsuspecting user into following a malicious URI.

The following example URIs are:

http://www.example.com/cells-v3-3/user.php?pcid= [SQLite Injection]

http://www.example.com/cells-v3-3/errmsg.php?msg= [XSS]