PDA

Bekijk Volledige Versie : Re: SQL injection in Invision Power Board v2.1.5



mattmecham@gmail.com
07/03/06, 18:40
I've tested this and cannot get SQL to execute. The "s" parameter is run past PHP's intval() which knocks off anything that's not a number.

Can you explain how you got this to work?