Description
AdCycle 1.17 and earlier allow remote attackers to modify SQL queries, which are not properly sanitized before being passed to the MySQL database.
References
- 20011225 GOBBLES CGI MARATHON #002 mailing-list
- adcycle-modify-sql-query(7762) vdb-entry
- 3741 vdb-entry