Description
SQL injection vulnerability in search.php in PluggedOut Nexus 0.1 allows remote attackers to execute arbitrary SQL commands via the (1) Location, (2) Last Name, and (3) First Name parameters.
References
- http://pridels0.blogspot.com/2005/12/pluggedout-nexus-sqlxss-vuln_06.html
- 15724 vdb-entry
- ADV-2005-2751 vdb-entry
- 21478 vdb-entry
- 17909 third-party-advisory