SQL injection vulnerabilities

[l2dy]

e.g. $_GET['table'] is concatenated into a SQL query verbatim.

opensips-cp/web/tools/users/alias_management/alias_management.php

Lines 138 to 147 in 4402206

	$user_table = $_GET['table'];
	$alias_username=$_POST['alias_username'];
	$alias_domain=$_POST['alias_domain'];
	$username = $_POST['username'];
	$domain= $_POST['domain'];
	if ($alias_username=="" || $alias_domain=="" || $username=="" || $domain=="") {
	$errors = "Invalid data, the entry was not modified in the database";
	} else {
	$sql = "SELECT count(*) FROM ".$user_table." WHERE alias_username=? AND alias_domain=? AND id!=?";