Bookmark4u

Bookmark4u versions 2.1 and earlier might leaving a out-of-door aggressor to improver administrative entree victimization SQL injection. A away aggressor power card specially-crafted SQL details to the admin/config.php handwriting exploitation the 'sqlcmd' or 'mode' parameters, which might entrust the assaulter to summation administrative approach to the placement and possibly add, modify, or natural info in the back-end database.