int13h / squert

A Simple QUEry and Report Tool
http://www.squertproject.org
GNU General Public License v3.0
142 stars 49 forks source link

Fixed some SQL injections and a command injection vul #73

Closed theMace closed 8 years ago

theMace commented 8 years ago

There are still some SQL injections, which require further re-factoring for the code (the use of filters).. I haven't yet reviewed the entire code, these are just the few (serious) vulns I happened to spot.