Description
Multiple SQL injection vulnerabilities in OcoMon 1.20, and possibly earlier versions, allow remote attackers to execute arbitrary SQL commands via unknown attack vectors in an unspecified input form, a different vulnerability than CVE-2005-4664.
References
- http://sourceforge.net/project/showfiles.php?group_id=45554
- 17470 third-party-advisory
- ocomon-sql-injection(23085) vdb-entry
- 15386 vdb-entry
- http://sourceforge.net/project/shownotes.php?release_id=369163
- 20751 vdb-entry