Sql injection

Website Broker Script allows SQL Injection via the 'statusid' Parameter to statuslist.php...

CVE-2017-15992

Website Broker Script allows SQL Injection via the 'statusid' Parameter to statuslist.php...

CVE-2017-15992

CVE-2017-15992 affects the Website Broker Script, where a SQL injection is possible through the GET parameter status_id in the file status_list.php . The vulnerability arises from unsafely handling the input, enabling an attacker to inject SQL commands. Public references describe a boolean-based ...

CVE-2017-15992

Website Broker Script allows SQL Injection via the 'statusid' Parameter to statuslist.php...

CVE-2017-15992: Improper Neutralization of Special Elements used in an SQL Command

Website Broker Script allows SQL Injection via the 'statusid' Parameter to statuslist.php...

Website Broker Script - 'status_id' SQL Injection

Exploit Title: Website Broker Script - 'statusid' Parameter SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software Link: http://www.exclusivescript.com/product/UwCG4464436/php-scripts/website-broker-script Demo:...