Description
SQL injection vulnerability in vCounter.php in vCounter 1.0 allows remote attackers to execute arbitrary SQL commands via the URI (_SERVER[REQUEST_URI] variable).
References
- 24234 vdb-entry
- 19422 third-party-advisory
- vcounter-url-sql-injection(25500) vdb-entry
- http://evuln.com/vulns/108/summary.html
- ADV-2006-1147 vdb-entry
- 17302 vdb-entry
- 20060407 [eVuln] vCounter - sourceworkshop SQL Injection Vulnerability mailing-list