Bugtraq mailing list archives

SQLi Vulnerability in ATuter management system

From: sirus.shahini () gmail com
Date: Wed, 2 Dec 2015 16:08:29 GMT

The vulnerability resides in:
mods/_standard/assignments/add_assignment.php at line 247 and the variable $assign_to.

The vendor failed to request a CVE number. So I decided to request one here.

Current thread:

SQLi Vulnerability in ATuter management system sirus . shahini (Dec 02)