Description
SQL injection vulnerability in Quicksilver Forums before 1.5.1 allows remote attackers to execute arbitrary SQL commands via the HTTP_USER_AGENT header.
References
- 15710 vdb-entry
- http://sourceforge.net/project/shownotes.php?release_id=375970&group_id=154354
- 17861 third-party-advisory
- ADV-2005-2729 vdb-entry
- 21443 vdb-entry