Description
SQL injection vulnerability in count.php in Skull-Splitter PHP Downloadcounter for Wallpapers 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) count_fieldname, (2) url_fieldname, or (3) url parameter.
References
- 19314 third-party-advisory
- 649 third-party-advisory
- downloadcounter-count-sql-injection(25316) vdb-entry
- 17156 vdb-entry
- 20060329 [eVuln] Skull-Splitter's PHP Downloadcounter for Wallpapers SQL Injection mailing-list
- http://evuln.com/vulns/105/summary.html
- 23972 vdb-entry
- ADV-2006-1004 vdb-entry