Description
SQL injection vulnerability in search.php in AtlantisFAQ Knowledge Base Software 2.03 and earlier allows remote attackers to execute arbitrary SQL commands via the searchStr parameter.
References
- ADV-2005-2624 vdb-entry
- 17812 third-party-advisory
- 21267 vdb-entry
- 15654 vdb-entry
- http://pridels0.blogspot.com/2005/11/altantisfaq-sql-inj-vuln.html