RW: Download index.php Multiple Variable SQL Injection

2006-01-31T03:39:10
ID OSVDB:23291
Type osvdb
Reporter OSVDB
Modified 2006-01-31T03:39:10

Description

Manual Testing Notes

http://[target]/files/index.php?cid=' http://[target]/files/index.php?dlid=' http://[target]/files/index.php?ACT=dl&id='

References:

Related OSVDB ID: 23292 Other Advisory URL: http://www.cyberlords.net/advisories/cl_rwdownload.txt