BoutikOne – ‘search.php’ Multiple SQL Injections

  • 作者: cdx.security
    日期: 2011-03-14
  • 类别:
    平台:
  • 来源:https://www.exploit-db.com/exploits/35453/
  • source: https://www.securityfocus.com/bid/46861/info
    
    Pixie is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query.
    
    A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.
    
    http://www.example.com/search.php?advCat=[sqli]
    
    http://www.example.com/search.php?advComp=[sqli]