|
LinksCaffe contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the links.php script not properly sanitizing user-supplied input to the 'cat', 'link_id', 'newdays', and 'offset' variable. This may allow an attacker to inject or manipulate SQL queries in the back-end database. When the magic_quote_gpc PHP option is disabled an attacker may use this flaw to create a shell in a writable folder that can be used to run arbitrary commands. Additionally, if a failed query is performed, the program will disclose the softwares installation path. While such information is relatively low risk, it is often useful in carrying out additional, more focused attacks.
|
gmail.com -
