Description
SQL injection vulnerability in admincore.php in BirdBlog before 1.2.0 allows remote attackers to execute arbitrary SQL commands via the (1) userid or (2) userpw parameters.
References
- http://birdblog.sourceforge.net/ChangeLog
- http://cvs.sourceforge.net/viewcvs.py/birdblog/birdblog/admin/admincore.php?r1=1.4&r2=1.5
- birdblog-admincore-sql-injection(19799) vdb-entry
- 12880 vdb-entry
- 1013548 vdb-entry
- 14676 third-party-advisory