• info
• discussion
• exploit
• solution
• references

Aardvark Topsites PHP Multiple Vulnerabilities

The following proof of concept examples have been provided for the SQL injection issue:

http://www.example.com/index.php?method=`
http://www.example.com/index.php?a=lostpw&set=1&id=`
http://www.example.com/index.php?a=lostpw&set=1&session_id=`