CIS cgi ru-gov SQL Injection

2020.10.18

Sir-Majed (SA)

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

https://fcp.economy.gov.ru/

https://fcp.economy.gov.ru/cgi-bin/cis/fcp.cgi/Fcp/ViewGrbs/074/27/

Подробности
DBD::mysql::db selectall_arrayref failed: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ')
AND b.grbs = '074'
AND b.target_item
GROUP BY IF(vrg.id_vr,vrg.id_vr,3)
' at line 5 at FCP/Fcp.pm line 1031.

Sir-Majed
https://twitter.com/mm4xm

See this note in RAW Version

Vote for this issue:

100%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

CIS cgi ru-gov SQL Injection

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.