GoldLink 3.0 - Cookie SQL Injection
| EKU-ID: 28714 | CVE: CVE-2003-1504;OSVDB-2690 | OSVDB-ID: |
| Author: Weke | Published: 2003-10-18 | Verified:
 |
| Download: | ||
Rating☆☆☆☆☆ |
| EKU-ID: 28714 | CVE: CVE-2003-1504;OSVDB-2690 | OSVDB-ID: |
| Author: Weke | Published: 2003-10-18 | Verified:
|
| Download: | ||
Rating☆☆☆☆☆ |
source: https://www.securityfocus.com/bid/8847/info GoldLink is prone to SQL injection attacks. This is due to insufficient validation of values supplied via cookies. As a result, it may be possible to manipulate SQL queries, potentially resulting in information disclosure, bulletin board compromise or other consequences. vadmin_login = ' OR Login LIKE '% and vadmin_pass = ' OR Password LIKE '%