Description
SQL injection vulnerability in lib/adodb/server.php in AngelineCMS 0.6.5 and earlier might allow remote attackers to execute arbitrary SQL commands via the query string.
References
- angelinecms-server-sql-injection(26382) vdb-entry
- 883 third-party-advisory
- http://www.subjectzero.net/research/ang_CMS.htm
- 20060507 AngelineCMS Multiple Vulnerabilities mailing-list