Description
SQL injection vulnerability in divers.php in Vincent Leclercq News 5.2 allows remote attackers to execute arbitrary SQL commands via the (1) id and (2) texte parameters.
References
- 20060629 News <= 5.2 XSS, SQL Injection, Full Path Disclosure mailing-list
- ADV-2006-2642 vdb-entry
- 20936 third-party-advisory
- 18775 vdb-entry
- vlcnews-divers-sql-injection(27504) vdb-entry
- http://www.acid-root.new.fr/advisories/news52.txt