وزارة الإتصالات وتكنولوجيا المعلومات Gov.ps SQL Injection

2020.10.15
sa Sir-Majed (SA) sa
Risk: Medium
Local: No
Remote: Yes
CVE: N/A
CWE: N/A

www.mtit.gov.ps https://www.mtit.gov.ps/index.php/c_home/search /index.php/c_home/search ' A Database Error Occurred Error Number: 1064 You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '%' and catid IN (8, 9,51,61,125,126)' at line 1 select count(*) as c from cah5n_content where sectionid =0 and title like '%'%' and catid IN (8, 9,51,61,125,126) Filename: /home/mtit/public_html/models/m_home.php Line Number: 381 Sir-Majed Twitter:MM4XM


Vote for this issue:
0%
100%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2020, cxsecurity.com

 

Back to Top