Description
search.php in eggblog 2.0 allows remote attackers to obtain the full path via an invalid q parameter, as used by the Keyword and Search fields, possibly due to an SQL injection vulnerability.
References
- ADV-2005-3072 vdb-entry
- http://pridels0.blogspot.com/2005/12/eggblog-vuln.html
- 21908 vdb-entry
- 18212 third-party-advisory
- 16056 vdb-entry
- eggblog-search-path-disclosure(23857) vdb-entry