|
Description
|
|
Multiple vulnerabilities have been identified in Destiney Links Script, which could be exploited by remote attackers to perform SQL injection, cross site scripting, and local file inclusions.
The first issue is due to input validation errors in the "index.php" and "add.php" scripts when processing cetain parameters, which could be exploited by attackers to cause malicious scripting code to be executed by the user's browser.
The second flaw is due to input validation errors in various scripts that do not validate the "ID" paremeter, which could be exploited by malicious people to conduct SQL injection attacks.
The third vulnerability is due to an input validation error in the "index.php" script that does not properly validate the "show" parameter, which could be exploited by remote attackers to include or disclose the contents of local files with the privileges of the web server.
|
