Description
TWIG 2.6.2 and earlier allows remote attackers to perform unauthorized database operations via a SQL injection attack on the id parameter.
References
- 2791 vdb-entry
- http://twig.screwdriver.net/index.php3
- twig-webmail-query-modification(6619) vdb-entry
- 20010528 TWIG SQL query bugs mailing-list