Geeklog <= 1.5.2 - savepreferences()/*blocks[] SQL Injection Exploit

No description provided by source. ?php / Geeklog = 1.5.2 savepreferences/blocks remote sql injection exploit by Nine:Situations:Group::bookoo our site: http://retrogod.altervista.org/ software site: http://www.geeklog.net/ PHP and MySQL version independent vulnerability, see usersettings.php nea...

Geeklog &lt;= 1.5.2 savepreferences&#40;&#41;/*blocks[] remote sql injection exploit

?php / Geeklog = 1.5.2 savepreferences/blocks remote sql injection exploit by Nine:Situations:Group::bookoo our site: http://retrogod.altervista.org/ software site: http://www.geeklog.net/ PHP and MySQL version independent vulnerability, see usersettings.php near lines 1467 - 1480: ... if isset...

Geeklog 1.5.2 - &#039;savepreferences()/*blocks[]&#039; SQL Injection

1 switch $mode case 'saveuser': savepreferences $POST; $display .= saveuser$POST; PLGprofileExtrasSave ; break; case 'savepreferences': savepreferences $POST; $display .= COMrefresh $CONF'siteurl' . '/usersettings.php?mode=preferences&msg=6'; break; ... all the $POST variables are passed to the...