-
-
[转帖]ColdBookmarks 1.22 SQL Injection Vulnerability
-
发表于:
2010-9-9 10:48
2011
-
[转帖]ColdBookmarks 1.22 SQL Injection Vulnerability
ColdGen - coldbookmarks v1.22 Remote 0day SQL Injection vulnerability
# Vendor: http://www.coldgen.com/
# Found by: mr_me (net-ninja.net)
PoC
http://[target]/[path]/index.cfm?fuseaction=EditBookmark&BookmarkID=[SQLi]&CFID=XXXXXX&CFTOKEN=XXXXXXXX
[注意]传递专业知识、拓宽行业人脉——看雪讲师团队等你加入！
