Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-2302

SQL Injection

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Critical
    • 1.3.2, 1.4 M2
    • 1.3
    • {Unused} Core
    • None
    • Unit

    Description

      Seems that it's possible to change DB from the xwiki URL. For eg.: http://www.xwiki.org/xwiki/bin/view/Main/Test:Truc.WebHome will try to query 'Main.Test' DB.
      I don't know if it's possible to exploit this bug.

      Attachments

        Activity

          People

            sdumitriu Sergiu Dumitriu
            raffaello Raffaello Pelagalli
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: