Description
Multiple SQL injection vulnerabilities in PDFdirectory before 1.0 allow remote attackers to execute arbitrary SQL commands via multiple unspecified vectors involving (1) util.php, (2) userpref.php, (3) user.php, (4) uploadfrm.php, (5) title.php, (6) team.php, (7) stats.php, (8) page.php, (9) org.php, (10) member.php, (11) index.php, (12) group.php, or (13) anniv.php.
References
- 22412 vdb-entry
- 22407 vdb-entry
- 22405 vdb-entry
- 22411 vdb-entry
- http://sourceforge.net/project/shownotes.php?release_id=382411&group_id=122682
- 16273 vdb-entry
- 22404 vdb-entry
- 18459 third-party-advisory
- 22403 vdb-entry
- 22410 vdb-entry
- ADV-2006-0231 vdb-entry
- 22409 vdb-entry
- 22406 vdb-entry
- 22408 vdb-entry
- 22414 vdb-entry
- 22415 vdb-entry
- 22413 vdb-entry