Ravens PHP Scripts

PHPNuke Category Parameter SQL Injection Vulnerability
Date: Sunday, February 15, 2004 @ 14:19:00 CST
Topic: Security


Patch your search module:
under /* Category Selection */
add:
$category = intval($category);
and change:
$categ = "AND catid=$category ";
to:
$categ = "AND catid='$category' ";







This article comes from Ravens PHP Scripts
https://www.ravenphpscripts.com

The URL for this story is:
https://www.ravenphpscripts.com/modules.php?name=News&file=article&sid=275