Description
SQL injection vulnerability in big.php in Mafia Moblog 0.6M1 and earlier allows remote attackers to execute arbitrary SQL commands via the img parameter.
References
- 20060608 Mafia Moblog Full Path Disclosure / SQL injection mailing-list
- 1078 third-party-advisory
- ADV-2006-2249 vdb-entry
- 18352 vdb-entry
- mafia-moblog-big-sql-injection(27000) vdb-entry
- 20529 third-party-advisory