Phorum 5.0.11 – ‘Read.php’ SQL Injection

42次阅读
没有评论

Phorum 5.0.11 – ‘Read.php’ SQL Injection

漏洞ID 1054724 漏洞类型
发布时间 2004-10-24 更新时间 2004-10-24
Phorum 5.0.11 - 'Read.php' SQL InjectionCVE编号 N/A
Phorum 5.0.11 - 'Read.php' SQL InjectionCNNVD-ID N/A
漏洞平台 PHP CVSS评分 N/A
|漏洞来源
https://www.exploit-db.com/exploits/25919
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
source: http://www.securityfocus.com/bid/14095/info

Phoroum is prone to SQL injection attacks. Insufficient sanitization of user input may allow a malicious user to manipulate the structure and logic of database queries.

Successful exploitation could allow the attacker to compromise security properties of the application and the database. Possible consequences include unauthorized access to the application and database.

This issue has been reported to exist in Phorum 5.0.11. Earlier versions may also be affected. 

http://www.example.com/read.php?1,[MALICIOUS_SQL_CODE],newer

相关推荐: GnomeHack 1.0.5 – Local Buffer Overflow

GnomeHack 1.0.5 – Local Buffer Overflow 漏洞ID 1053476 漏洞类型 发布时间 2000-11-15 更新时间 2000-11-15 CVE编号 N/A CNNVD-ID N/A 漏洞平台 Linux CVSS评分…

正文完
 0