Description
Multiple SQL injection vulnerabilities in thinkWMS 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in (a) index.php or (b) printarticle.php, and the (2) catid parameter in index.php.
References
- 26743 vdb-entry
- 18567 vdb-entry
- thinkwms-printarticle-sql-injection(27270) vdb-entry
- 26742 vdb-entry
- 1016355 vdb-entry
- 20747 third-party-advisory
- ADV-2006-2470 vdb-entry
- http://pridels0.blogspot.com/2006/06/thinkwms-sql-injection-vuln.html