Description
Multiple SQL injection vulnerabilities in Pro Publish 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) email and (2) password parameter to (a) admin/login.php, (3) find_str parameter to (b) search.php, or (4) artid parameter to (c) art.php, or (5) catid parameter to (d) cat.php.
References
- 25127 vdb-entry
- 19882 third-party-advisory
- ADV-2006-1578 vdb-entry
- 17762 vdb-entry
- 25126 vdb-entry
- http://evuln.com/vulns/130/summary.html
- propublish-multiple-sql-injection(26148) vdb-entry
- 20060602 Pro Publish SQL Injection and XSS Vulnerabilities mailing-list
- http://soot.shabgard.org/bugs/propublish.txt
- 25125 vdb-entry
- 25124 vdb-entry