Exploit Database - Logo

Tausch Ticket Script 3 - 'vote.php?descr' SQL Injection

EDB-ID: 34810 Author: Moudi Published: 2009-07-07
CVE: CVE-2009-2428 Type: Webapps Platform: PHP
Aliases: N/A Advisory/Source: Link Tags: N/A
E-DB Verified: Verified Exploit: Download Exploit Code Download / View Raw Vulnerable App: N/A
« Previous Exploit Next Exploit » 
source: http://www.securityfocus.com/bid/43710/info
 
Tausch Ticket Script is prone to multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input.
 
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
Tausch Ticket Script 3 is vulnerable; other versions may also be affected.

http://www.example.com/vote.php?descr=[SQL]
« Previous Exploit Next Exploit »

Related Exploits

Trying to match CVEs (1): CVE-2009-2428
Trying to match OSVDBs (1): 55692
Other Possible E-DB Search Terms: Tausch Ticket Script 3,  Tausch Ticket Script
Date D V Title Author
2009-07-07 Verified Tausch Ticket Script 3 - 'suchauftraege_user.php?userid' SQL InjectionMoudi
Menu