Searching phpclanwebsite software vulnerabilities

SQL injection vulnerability in index.php in Php

Phpclanwebsite | vulnerability | injection | indexphp | SQL |

SQL injection vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.1 allows remote attackers to execute arbitrary SQL commands via the (1) par parameter in the post function on the forum page and possibly the (2) poll_id parameter on the poll page. NOTE: the poll_id vector can also allow resultant cross-site scripting (XSS) from an unquoted error message for invalid SQL syntax.


index.php in Phpclanwebsite 1.23.1 allows remot

Phpclanwebsite | indexphp |

index.php in Phpclanwebsite 1.23.1 allows remote authenticated users to obtain the installation path by specifying an invalid file name to the uploader page, as demonstrated by "\", which will display the full path of uploader.php. NOTE: this might be the result of a file inclusion vulnerability.


Software vulnerabilities results 1 to 3 of 3     
Page: 1