4 matches found
CVE-2013-3531
SQL injection vulnerability in meneger.php in RadioCMS 2.2 allows remote attackers to execute arbitrary SQL commands via the playlistid parameter...
Sql injection
SQL injection vulnerability in meneger.php in RadioCMS 2.2 allows remote attackers to execute arbitrary SQL commands via the playlistid parameter...
CVE-2013-3531
SQL injection vulnerability in meneger.php in RadioCMS 2.2 allows remote attackers to execute arbitrary SQL commands via the playlistid parameter...
Radio CMS 2.2 SQL Injection
Title: RadioCMS 2.2 + Author: RoosterXEKA + Greetz to: Isis,luz3r,slider + Contact: forum.xeksec.com + -- Vuln Code -- ... if $GET'playlistid' $playlistidget = 'playlistid'; ... if $playlistid != "" $query = "SELECT FROM playlist WHERE $playlistid;"; ... -- Exploitable --...