Description
SQL injection vulnerability in functions/final_functions.php in VSNS Lemon 3.2.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter.
References
- 1015836 vdb-entry
- 20060406 [eVuln] VSNS Lemon Multiple Vulnerabilities mailing-list
- vsns-lemon-finalfunctions-sql-injection(25456) vdb-entry
- http://evuln.com/vulns/106/description.html
- 19420 third-party-advisory
- 17281 vdb-entry
- 24211 vdb-entry