delta/pragyan — pull request #189 by nean (2013-12-07 20:40:04+00:00)
Title: Blind sql injection

The cms as it is is vulnerable to blind sql injection true or false method..

https://github.com/nean/pragyan/commit/81c9fef17fa79dc226228d45a2c34495239b4bba moves the security check before page path processing and prevents true or false responses.

https://github.com/nean/pragyan/commit/38e72010fe699f876404c46aef39756f756e6263 escapes the vulnerable variable.

i dont want to post the exploit details here, however if you are interested ping me :wink: