Blind SQL Injection PivotX <= v2.3.11

Posted by Manuel Garcia Cardenas on Jul 15

=============================================
MGC ALERT 2016-003
– Original release date: April 14, 2016
– Last revised: July 14, 2016
– Discovered by: Manuel García Cárdenas
– Severity: 7,1/10 (CVSS Base Score)
=============================================

I. VULNERABILITY
————————-
Blind SQL Injection PivotX <= v2.3.11

II. BACKGROUND
————————-
PivotX is an open source blog software written in PHP using…