OneCMS 2.4 (userreviews.php abc) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================= OneCMS 2.4 userreviews.php abc Remote SQL Injection Exploit ============================================================= !/usr/bin/perl OneCMS v2.4 Remote SQL Injection Exploit...

OneCMS 2.4 - 'abc' SQL Injection

!/usr/bin/perl OneCMS v2.4 Remote SQL Injection Exploit Description ----------- OneCMS contains a flaw that allows an attacker to carry out an SQL injection attack. The issue is due to the userreviews.php script not properly sanitizing user-supplied input to the 'abc' variable. This may allow an...