SQL injection vulnerability in search.php in MyTopix 1.2.3 allows remote attackers to execute arbitrary SQL commands via the (1) mid and (2) keywords parameters.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mytopix | Jaia_interactive | 1.2.3 (including) | 1.2.3 (including) |
References
- http://kapda.ir/advisory-249.html
- http://securityreason.com/securityalert/413
- http://www.securityfocus.com/archive/1/423950/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24502
- http://kapda.ir/advisory-249.html
- http://securityreason.com/securityalert/413
- http://www.securityfocus.com/archive/1/423950/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24502