PT-2015-3533

Name of the Vulnerable Software and Affected Versions AJAX Post Search cardoza-ajax-search plugin versions prior to 1.3 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the srch txt parameter in a "the search text" action to the...