Description
Adobe Dreamweaver 8 before 8.0.2 and MX 2004 can generate code that allows SQL injection attacks in the (1) ColdFusion, (2) PHP mySQL, (3) ASP, (4) ASP.NET, and (5) JSP server models.
References
- 20060509 Multiple SQL Injection Vulnerabilities in Dreamweaver Generated Code mailing-list
- dreamweaver-server-sql-injection(26339) vdb-entry
- 20054 third-party-advisory
- 17928 vdb-entry
- http://www.adobe.com/support/security/bulletins/apsb06-07.html
- ADV-2006-1753 vdb-entry
- 25361 vdb-entry
- 1016050 vdb-entry