TaskDriver notes.php taskid Variable SQL Injection

2007-05-10T07:48:22
ID OSVDB:35973
Type osvdb
Reporter OSVDB
Modified 2007-05-10T07:48:22

Description

Technical Description

This vulnerability is only present when the magic_quotes_gpc PHP option is 'off'.

References:

Secunia Advisory ID:25221 Related OSVDB ID: 35972 Other Advisory URL: http://www.w4ck1ng.com/exploits/w4ck1ng_taskdriver.txt ISS X-Force ID: 34249 Generic Exploit URL: http://www.milw0rm.com/exploits/3896 FrSIRT Advisory: ADV-2007-1768 CVE-2007-2622 Bugtraq ID: 23919