Report new bug | New search | Development Roadmap Status: Open | Feedback | All
Bug #3961 SQL injection in URL
Submitted: 2005-03-25 18:36 UTC
From: advantis at gmx dot net Assigned: mj
Status: Closed Package: Web Site
PHP Version: Irrelevant OS:
Roadmaps: (Not assigned)    
Subscription  
Comments Add Comment Add patch


Anyone can comment on a bug. Have a simpler test case? Does it work for you on a different platform? Let us know! Just going to say 'Me too!'? Don't clutter the database with that please !
Your email address:
MUST BE VALID
Solve the problem : 46 + 12 = ?

 
 [2005-03-25 18:36 UTC] advantis at gmx dot net
Description: ------------ The URL Query String is not properly checked. Reproduce code: --------------- http://pecl.php.net/package-stats.php?cid=12%20or%201=1&pid=&rid= Expected result: ---------------- Error Actual result: -------------- Puts the modified parameter as is in the WHERE clause which makes where query return the entire database.

Comments

 [2005-03-28 19:53 UTC] User who submitted this comment has not confirmed identity
If you submitted this note, check your email.If you do not have a message, click here to re-send
MANUAL CONFIRMATION IS NOT POSSIBLE.  Write a message to pear-dev@lists.php.net
to request the confirmation link.  All bugs/comments/patches associated with this

email address will be deleted within 48 hours if the account request is not confirmed!