Description
SQL injection vulnerability in phpESP 1.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors.
References
- 20358 vdb-entry
- phpesp-unknown-sql-injection(22905) vdb-entry
- ADV-2005-2237 vdb-entry
- http://cvs.sourceforge.net/viewcvs.py/phpesp/phpESP/docs/CHANGES?rev=.&content-type=text/plain
- 15232 vdb-entry
- 17333 third-party-advisory