Description
SQL injection vulnerability in DeskLance 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the announce parameter.
References
- ADV-2005-2575 vdb-entry
- 17730 third-party-advisory
- http://pridels0.blogspot.com/2005/11/desklance-vuln.html