Description
SQL injection vulnerability in projects/project-edit.asp in Digger Solutions Intranet Open Source (IOS) version 2.7.2 allows remote attackers to execute arbitrary SQL commands via the project_id parameter.
References
- 14882 vdb-entry
- 19574 vdb-entry
- 16870 third-party-advisory
- ADV-2005-1804 vdb-entry
- http://osvdb.org/ref/19/DiggerIOS_Ver_2.7.2_SQL_Injection_Vulnerability.pdf
- diggersolutionsintranet-projectedit-sql-inj(22345) vdb-entry