Description
Multiple SQL injection vulnerabilities in VBZooM 1.02 allow remote attackers to execute arbitrary SQL commands via the (1) QuranID, (2) ShowByQuranID, or (3) Action parameters to meaning.php.
References
- 20060613 VBZooM <<--V1.02 "meaning.php" SQL injection mailing-list
- 18403 vdb-entry
- vbzoom-meaning-sql-injection(27170) vdb-entry