Users of Easy Banner Free please be advised of a SQL injection vulnerability that has been identified.
To view this vulnerability, possible remedies, and others please check out the Security Advisories at Critical Watch (http://criticalwatch.com/support/security-advisories.aspx)
Amplify’d from www.criticalwatch.com
Vulnerability exists in member.php script.
User-defined parameters username and password are not properly sanitized against SQL injections.
This can be used to bypass authentication or execute arbitrary SQL query.
See this Amp at http://bit.ly/fmnPLn
No comments:
Post a Comment