Full title: Online Graduate Tracer System - Multiple SQL injection Vulnerabilities 
Category: web applications
Platform: php
A Blind SQL injection vulnerability in the fill-in forms of Online Graduate Tracer System allows remote unauthenticated attackers to execute remote arbitrary SQL commands through "age" parameter.

# 0day.today @ http://0day.today/