Deprecated: The each() function is deprecated. This message will be suppressed on further calls in /home/zhenxiangba/zhenxiangba.com/public_html/phproxy-improved-master/index.php on line 456
Re: dvddb-0.6 media sql-inj. vuln.
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: dvddb-0.6 media sql-inj. vuln.
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: Re: dvddb-0.6 media sql-inj. vuln.
- From: james@xxxxxxxxxxxxxxxxxx
- Date: 2 Oct 2007 19:28:19 -0000
This exploit is incorrect. There is no SQL injection attack here. The $user
variable is sanitized prior to passing to the function in common.php, and
calling the file directly does nothing because it's just a function definition.