SQLi Vulnerability in ATuter management system

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Subject: SQLi Vulnerability in ATuter management system
From: sirus.shahini@xxxxxxxxx
Date: Wed, 2 Dec 2015 16:08:29 GMT

The vulnerability resides in:
mods/_standard/assignments/add_assignment.php at line 247 and the variable $assign_to.

The vendor failed to request a CVE number. So I decided to request one here.

Prev by Date: Two Reflected XSS Vulnerabilities in Calls to Action WordPress plugin
Next by Date: Gnome Nautilus [Denial of Service]
Previous by thread: Two Reflected XSS Vulnerabilities in Calls to Action WordPress plugin
Next by thread: Gnome Nautilus [Denial of Service]
Index(es):
- Date
- Thread

[Index of Archives] [Linux Security] [Netfilter] [PHP] [Yosemite News] [Linux Kernel]

Powered by Linux