Description
Multiple SQL injection vulnerabilities in Gregarius 0.5.2 allow remote attackers to execute arbitrary SQL commands via the (1) folder parameter to feed.php or (2) rss_query parameter to search.php.
References
- 16939 vdb-entry
- 20060303 Gregarius 0.5.2 XSS and SQL Injection Vulnerabilities mailing-list
- gregarius-feed-sql-injection(25059) vdb-entry
- 23681 vdb-entry
- 23680 vdb-entry
- 537 third-party-advisory
- ADV-2006-0819 vdb-entry
- 19102 third-party-advisory