Group: Member Post Group: Newbie
Posts: 1
Status:  |
Hi,
Kindly check the admin demo area, there seems to be a lot of vulnerabilities on your site. While creating a demo user, it throws back the SQL Query and field missing, could lead to a serious SQL Injection Attack on the site and services.
Could not make the Query.
INSERT INTO users
SET type = '0',
password = '$1$8.hw4lqI$QIQlpQlrp.zN43XZL4hB40',
email = 'tahmid.i@myshoreitsolutions.co.in',
num_vs = 0,
num_users = 0,
space = 0,
ram = 0,
burst = 0,
bandwidth = 0,
cpu = 0,
cores = 4,
cpu_percent = 0,
num_ipv4 = 0,
num_ipv6 = 0,
openvz = 0,
xen = 0,
xenhvm = 0,
kvm = 0,
sg = '',
mg = '',
dnsplid = 0
MySQL Error No : 1054
MySQL Error : Unknown column 'num_vs' in 'field list'
|
December 12, 2013, 8:27 am
