Description
Multiple SQL injection vulnerabilities in Contrexx before 1.0.5 allow remote attackers to execute arbitrary SQL commands via the (1) value parameter to the poll module or (2) pId parameter to the gallery module.
References
- 1014554 vdb-entry
- 16169 third-party-advisory
- 20050722 Advisory 11/2005: Multiple vulnerabilities in Contrexx mailing-list
- 14352 vdb-entry
- 18166 vdb-entry
- contrexx-votingoption-pld-sql-injection(21482) vdb-entry
- 18167 vdb-entry
- http://www.hardened-php.net/advisory_112005.59.html