PT-2012-3028

Name of the Vulnerable Software and Affected Versions Tube Ace Adult PHP Tube Script version 1.6 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the q parameter in the "mobile/search/index.php" endpoint. Recommendations For Tube Ace Adult PHP...

CVE-2012-1029: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in mobile/search/index.php in Tube Ace Adult PHP Tube Script 1.6 allows remote attackers to execute arbitrary SQL commands via the q parameter. NOTE: some of these details are obtained from third party information...