Description
SQL injection vulnerability in comment.php in Pineapple Technologies Lore 1.5.6 and earlier allows remote attackers to execute arbitrary SQL commands via the article_id parameter.
References
- 20385 third-party-advisory
- lore-comment-sql-injection(26801) vdb-entry
- 18206 vdb-entry
- http://pridels0.blogspot.com/2006/06/lore-156-sql-injection-vuln.html
- ADV-2006-2083 vdb-entry