Exploit Database - Logo

w3bcms - 'admin/index.php' SQL Injection

EDB-ID: 32733 Author: Pouya_Server Published: 2009-01-15
CVE: N/A Type: Webapps Platform: PHP
Aliases: N/A Advisory/Source: Link Tags: Vulnerability
E-DB Verified: Verified Exploit: Download Exploit Code Download / View Raw Vulnerable App: N/A
« Previous Exploit Next Exploit » 
source: http://www.securityfocus.com/bid/33310/info

The 'w3bcms' application is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/[Path]/index.php?seite=20%2Egaestebuch&action=[SQL]&id=1

Related Exploits

Trying to match OSVDBs (1): 105755
Other Possible E-DB Search Terms: w3bcms
Date D V Title Author
2009-02-09Download Exploit Code Verified w3bcms 3.5.0 - Multiple VulnerabilitiesDNX
2009-04-10Download Exploit Code Verified w3bcms Gaestebuch 3.0.0 - Blind SQL InjectionDNX
Menu