Description
SQL injection vulnerability in FileLister 0.51 and earlier allows remote attackers to execute arbitrary SQL commands via the search parameters, possibly the searchwhat parameter to definesearch.jsp.
References
- 17821 third-party-advisory
- 15706 vdb-entry
- 21476 vdb-entry
- 21416 vdb-entry
- http://pridels0.blogspot.com/2005/12/filelister-sql-inj-vuln.html
- filelister-definesearch-xss(23418) vdb-entry
- ADV-2005-2725 vdb-entry