Exploit eGroupWare 1.0 - '/tts/index.php?filter' SQL Injection

[Exploiter]

EDB-ID

25436

Проверка EDB

1. Пройдено

Автор

GULFTECH SECURITY

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2005-1203

Дата публикации

2005-04-18

source: https://www.securityfocus.com/bid/13212/info
  
eGroupWare is prone to multiple input validation vulnerabilities. A fixed version is available.
  
The issues arise due to a failure of the application to properly validate user-supplied input. These issues result in cross-site scripting and SQL injection attacks. 

http://egroupware/tts/index.php?filter=u99[SQL]
http://egroupware/tts/index.php?filter=c99[SQL]