ScriptMagix Recipes v.2.0 Multiple SQL Injection Security VulnerabilityDescriptionInput passed to the "recid" and "catid" parameters in "index.php" are not properly sanitised before being used in a SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code and/or to generate errors and full path disclosure. Confirmed in version 2.0. Other versions may also be affected. Impact The remote attacker can manipulate SQL queries by injecting arbitrary SQL code. References Original Advisory Product Homepage View entire list of over 400 known Web Application Vulnerabilities and the specific technologies which they target. See Web Vulnerabilities in popular applications such as: WordPress, Tiki Wiki, PHPNuke, PHPMyAdmin, phpBB, Mambo, PHP-Fusion, Mantis, Invision Power Board Get latest new web vulnerabilities via RSS |
|
