Описание
SQL injection vulnerability in rating.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allows remote attackers to execute arbitrary SQL commands via the book_id parameter.
SQL injection vulnerability in rating.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allows remote attackers to execute arbitrary SQL commands via the book_id parameter.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2008-2968
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43177
- http://secunia.com/advisories/30763
- http://securityreason.com/securityalert/3959
- http://www.bugreport.ir/?/44
- http://www.securityfocus.com/archive/1/493472/100/0/threaded
- http://www.securityfocus.com/bid/29813
Связанные уязвимости
nvd
больше 17 лет назад
SQL injection vulnerability in rating.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allows remote attackers to execute arbitrary SQL commands via the book_id parameter.