Description
SQL injection vulnerability in agentadmin.php in Immobilier allows remote attackers to execute arbitrary SQL commands via the (1) agentname or (2) agentpassword parameter.
References
- 20021125 Immobilier 1 (PHP) mailing-list
- immobilier-agentadmin-sql-injection(10705) vdb-entry