Previous articleBack to news listNext article
|
Sponsored links |
Want to become one of our authors and see your work published on ALLSeek.iNFO ?
|
| PowerPortal Input Validation Hole in 'index_page' Lets Remote Users Inject SQL Commands. |
|---|
Categorie: Vulnerability
Posted: 2004-11-18 by ReCall
Views: 459
Source: Click here
| Current Rating: Not rated
|
|
| Details |
|---|
Description: ruggine reported an input validation vulnerability in PowerPortal. A remote user can inject SQL commands.
It is reported that the 'index.php' script does not properly validate user-supplied input in the 'index_page' variable. A remote user can submit a specially crafted URL to execute SQL commands on the underlying database.
A demonstration exploit URL is provided:
http://[target]/pp13/index.php? index_page=and 1=1
Impact: A remote user can execute SQL commands on the underlying database.
Solution: No solution was available at the time of this entry.
|
| Syndication |
|---|
Permalink Email this
The URI to TrackBack this entry is:
http://allseek.info/news/trackback.php?id=1091
|
| User comments (post your comments ) |
|---|
Only registerd members can post comments and articles
|
|
Previous articleBack to news listNext article
|
