14 lines
No EOL
853 B
Text
Executable file
14 lines
No EOL
853 B
Text
Executable file
source: http://www.securityfocus.com/bid/24574/info
|
|
|
|
PHP Accounts is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
|
|
|
|
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
|
|
|
|
PHP Accounts 0.5 is vulnerable; other versions may also be affected.
|
|
|
|
http://www.example.com/path/index.php?Outgoing_Type_ID=[SQL INJECTION]
|
|
http://www.example.com/path/index.php?Outgoing_ID=[SQL INJECTION]
|
|
http://www.example.com/path/index.php?Project_ID=[SQL INJECTION]
|
|
http://www.example.com/path/index.php?Client_ID=[SQL INJECTION]
|
|
http://www.example.com/path/index.php?Invoice_ID=[SQL INJECTION]
|
|
http://www.example.com/path/index.php?Vendor_ID=[SQL INJECTION] |