Exploit PHPWebThings 1.4 - 'download.php?File' SQL Injection

[Exploiter]

EDB-ID

26500

Проверка EDB

1. Пройдено

Автор

A.1.M

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2005-3676

Дата публикации

2005-11-12

source: https://www.securityfocus.com/bid/15399/info

phpWebThings is prone to an SQL injection vulnerability. This is an input validation issue related to data that will be used in SQL queries, allowing a remote user to influence the structure and logic of a query.

It is likely that the issue could compromise the software. Depending on the database implementation and the nature of the affected query, it may also be possible to gain unauthorized access to the database. 

http://www.example.com/download.php?file=|SQL