Exploit PostNuke 0.72x Phoenix Glossary Module - SQL Injection

[Exploiter]

EDB-ID

22651

Проверка EDB

1. Пройдено

Автор

LORENZO MANUEL HERNANDEZ GARCIA-HIERRO

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

null

Дата публикации

2003-05-26

source: https://www.securityfocus.com/bid/7697/info

A vulnerability has been discovered in PostNuke Phoenix v0.723 and earlier. Specifically, the Glossary module fails to sufficiently sanitize user-supplied input, making it prone to SQL injection attacks.

Exploitation may allow for modification of SQL queries, resulting in information disclosure, or database corruption. 

http://example.com/modules.php?op=modload&name=Glossary&file=index&page=`[SQL QUERY]