Eroare ciudata XSS

[Incepat0r]

Dupa ce am "testat" search-ul la un site a aparut un XSS iar dupa ce i-am dat "ok" a aparut urmatoarea eroare. Este prima oara cand intalnesc asa ceva si poate ma ajutati cu unelel lamuriri.

A Database Error Occurred

Error Number: 1064

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'a')%' GROUP BY girls_id ORDER BY girls_1hour ASC LIMIT 30 OFFSET 0' at line 1

SELECT * FROM girls LEFT JOIN cities ON girls.fk_cities = cities.cities_id LEFT JOIN rel_girls_services ON girls.girls_id = rel_girls_services.fk_girls LEFT JOIN rel_girls_availabilities ON girls.girls_id = rel_girls_availabilities.fk_girls WHERE girls_status = 'active' AND cities_name LIKE '%%' GROUP BY girls_id ORDER BY girls_1hour ASC LIMIT 30 OFFSET 0

Filename: /usr/home/...

Line Number: 1013

[Dragos]

Se pare ca site-ul e vulnerabil la SQL Injection.

[AhEaD]

havijjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj )))))

[Nokia94]

havijjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj )))))

Da da mai taie din ele da-le ...