Description
Multiple SQL injection vulnerabilities in MvBlog before 1.6 allow remote attackers to execute arbitrary SQL commands via unknown vectors.
References
- ADV-2006-1330 vdb-entry
- 19634 third-party-advisory
- 17481 vdb-entry
- mvblog-multiple-sql-injection(25765) vdb-entry
- http://dev.mvblog.org/cgi-bin/trac.cgi/ticket/54