Description - SQL Injection Vulnerability in microBlog

SQL Injection found in microBlog script.

Exploit: Available
Solution: Available

Vulnerable script: index.php

Variables $month $year isn't properly sanitized before being used in a SQL query. This can be used to make any SQL query by injecting arbitrary SQL code.

Administrator's login and password is threatened.

Order Source Code Review

Protect against hacker attacks by source code review of a website made by Aliaksandr Hartsuyeu.The work will be done by experts in website security.