Description
get_input in adrotate.pm for Les VanBrunt AdRotate Pro 2.0 allows remote attackers to modify the database and possibly execute arbitrary commands via a SQL code injection attack.
References
- 3739 vdb-entry
- adrotate-sql-execute-commands(7736) vdb-entry
- 20011223 GOBBLES CGI MARATHON #001 mailing-list