Contus Job Portal - 'Category' SQL Injection
Author: Lazmania61 type: webapps platform: java port: date_added: 2012-01-13 date_updated: 2015-03-30 verified: 1 codes: tags: aliases: screenshot_url: application_url: raw file: 36548.txt
source: https://www.securityfocus.com/bid/51404/info Contus Job Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit will allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. http://www.example.com/demo/jobresult?searchname=quickjobsearch&Keywords=&Location=&Category=16â??A