Description
Multiple SQL injection vulnerabilities in VBZooM 1.00 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) MemberID parameter to rank.php, and the (2) QuranID parameter to lng.php.
References
- 20060619 VBZooM <<--V1.00 "rank.php" SQL injection mailing-list
- ADV-2006-2468 vdb-entry
- 20060619 VBZooM <<--V1.00 "lng.php" SQL injection mailing-list
- 20701 third-party-advisory
- 18497 vdb-entry
- vbzoom-rank-lng-sql-injection(27294) vdb-entry
- 1149 third-party-advisory