Description
Multiple SQL injection vulnerabilities in RI Blog 1.1 allow remote attackers to execute arbitrary SQL command via the (1) username or (2) password fields.
References
- ADV-2006-1489 vdb-entry
- 17654 vdb-entry
- 20060423 RIblog Remote SQL Injection Exploit mailing-list
- http://colander.altervista.org/advisory/riblog.txt
- 19783 third-party-advisory
- riblog-login-sql-injection(26132) vdb-entry