Description
SQL injection vulnerability in inc/elementz.php in AliPAGER 1.5, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the ubild parameter.
References
- 20084 third-party-advisory
- http://www.hamid.ir/security/alipager.txt
- alipager-elementz-sql-injection(26378) vdb-entry
- ADV-2006-1773 vdb-entry
- 17945 vdb-entry