Description
SQL injection vulnerability in news.php in VARIOMAT allows remote attackers to execute arbitrary SQL commands via the subcat parameter.
References
- 999 third-party-advisory
- variomat-news-sql-injection(26872) vdb-entry
- 20060528 VARIOMAT(advanced cms tool)SQL injection/XSS mailing-list