Description
Multiple SQL injection vulnerabilities in WWWThreads RC 3 allow remote attackers to execute arbitrary SQL commands via (1) the forumreferrer cookie to register.php and (2) the messages parameter in message_list.php.
References
- 739 third-party-advisory
- wwwthreads-multiple-sql-injection(25936) vdb-entry
- ADV-2006-1447 vdb-entry
- 17615 vdb-entry
- 19732 third-party-advisory
- 20060419 WWWThread RC 3 MultBugs mailing-list