Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:25415
HistoryDec 29, 2010 - 12:00 a.m.

Pre Jobo .NET "Password" SQL Injection Vulnerability

2010-12-2900:00:00
vulners.com
42

Pre Jobo .NET "Password" SQL Injection Vulnerability

PRODUCT >>> http://www.preprojects.com/jobo.asp

Input passed to the "Password" form field in jobseeker/register (the Post Your CV
page) is
not properly sanitised before being used in SQL queries. This can be exploited to
manipulate
SQL queries by injecting arbitrary SQL code.


non-customers crew | http://rock-madrid.com/


Surf the Web in a faster, safer and easier way:
Download Opera 9 at http://www.opera.com