Bug #3961 [NEW]: SQL injection in URL
| From: | advantis at gmx dot net | Date: | Fri, 25 Mar 2005 18:36:02 +0000 |
| Subject: | Bug #3961 [NEW]: SQL injection in URL | ||
| Groups: | php.pear.webmaster | ||
| Request: | Send a blank email to pear-webmaster+get-3990@lists.php.net to get a copy of this message | ||
From: advantis at gmx dot net
Operating system:
PHP version: Irrelevant
Package: Web Site
Bug Type: Bug
Bug description: SQL injection in URL
Description:
------------
The URL Query String is not properly checked.
Reproduce code:
---------------
http://pecl.php.net/package-stats.php?cid=12%20or%201=1&pid=&rid=
Expected result:
----------------
Error
Actual result:
--------------
Puts the modified parameter as is in the WHERE clause which makes where
query return the entire database.
--
Edit bug report at http://pecl.php.net/bugs/bug.php?id=3961&edit=1
--