Description
SQL injection vulnerability in admin/index.php in AlstraSoft Template Seller Pro 3.25 allows remote attackers to execute arbitrary SQL commands via the username field.
References
- 15442 vdb-entry
- 189 third-party-advisory
- template-seller-username-sql-injection(23071) vdb-entry
- http://myblog.it-security23.net/?postid=6
- ADV-2005-2456 vdb-entry
- 20051115 Template Seller Pro 3.25 mailing-list
- 20896 vdb-entry
- 17603 third-party-advisory