Description
SQL injection vulnerability in mod_search/index.php in PortailPHP 0.99 allows remote attackers to execute arbitrary SQL commands via the (1) $rech, (2) $BD_Tab_docs, (3) $BD_Tab_file, (4) $BD_Tab_liens, (5) $BD_Tab_faq, or (6) $chemin variables.
References
- portailphp-modsearch-sql-injection(10735) vdb-entry
- 6273 vdb-entry
- 20021128 Security Patch for PortailPHP 0.99 mailing-list