A flaw in the find-and-replace routine used when restoring a backup archive lets a crafted database value ending in an escaped backslash break out of its SQL string literal and append arbitrary SQL to the restore query. An authenticated user with permission to import an archive (or anyone able to supply an archive that an administrator restores)... Weiterlesen
Intelligence View
⚡ tsecurity.de Intelligence
SOCIAL SHARE CARD GENERATOR