Description
SQL injection vulnerability in the sloth TCL script in QuoteEngine before 1.2.0 allow remote attackers to execute arbitrary SQL commands via unknown vectors.
References
- 11255 third-party-advisory
- quoteengine-sql-injection(15685) vdb-entry
- http://sourceforge.net/project/shownotes.php?release_id=227554
- 10017 vdb-entry