Friday, January 12, 2018

CVE-2017-17970

Multiple SQL injection vulnerabilities in Muviko 1.1 allow remote attackers to execute arbitrary SQL commands via the (1) email parameter to login.php; the (2) season_id parameter to themes/flixer/ajax/load_season.php; the (3) movie_id parameter to themes/flixer/ajax/get_rating.php; the (4) rating or (5) ...

from Google Alert - vulnerability http://ift.tt/2qXpvsB
via IFTTT

No comments:

Post a Comment