Emby MediaServer 3.2.5 Boolean-based Blind SQL Injection

Discussion in 'News Aggregator' started by Packet Storm, 2 May 2017.

  1. Packet Storm

    Packet Storm Guest

    Emby MediaServer version 3.2.5 suffers from a blind SQL injection vulnerability. Input passed via the GET parameter 'MediaTypes' is not properly sanitized before being returned to the user or used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

    Continue reading...
     
    #1 Packet Storm, 2 May 2017
(You must log in or sign up to post here.)

Share This Page

Loading...