Description
SQL injection vulnerability in search.php in MyTopix 1.2.3 allows remote attackers to execute arbitrary SQL commands via the (1) mid and (2) keywords parameters.
References
- 413 third-party-advisory
- 20060204 [KAPDA::#26] - MyTopix Sql Injection & Path Disclosure mailing-list
- http://kapda.ir/advisory-249.html
- mytopix-search-sql-injection(24502) vdb-entry