Description
SQL injection vulnerability in Akarru Social BookMarking Engine before 0.4.3.4 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors, possibly involving the username parameter to akarru.lib/users.php.
References
- 16989 vdb-entry
- akarru-users-sql-injection(25115) vdb-entry
- http://sourceforge.net/project/shownotes.php?release_id=398713&group_id=155783
- 19112 third-party-advisory
- ADV-2006-0841 vdb-entry