CMS PUNTOPY SQL Injection

Sql Injection on CMS PUNTOPY + Date: 06/05/2014 + Risk: High + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.grupopuntopy.com/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: novedad.php + Exploit : http://host/novedad.php?ID=SQL Injection +...

Puntopy - novedad.php SQL Injection

Puntopy - novedad.php SQL Injection source: https://www.securityfocus.com/bid/67241/info Puntopy is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the...

Puntopy - 'novedad.php' SQL Injection

source: https://www.securityfocus.com/bid/67241/info Puntopy is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modify data, or...