Description
Multiple SQL injection vulnerabilities in browse.php in OWL 0.7 and 0.8 allow remote attackers to execute arbitrary SQL commands via the (1) parent or (2) sortposted parameter.
References
- 20050101 Various Vulnerabilities in OWL Intranet Engine mailing-list
- 13695 third-party-advisory
- 12114 vdb-entry
- owl-intranet-engine-sql-injection(18704) vdb-entry