Description
Multiple SQL injection vulnerabilities in FreeHost allow remote attackers to execute arbitrary SQL commands via (1) readme parameter to FreeHost/misc.php or (2) index parameter to FreeHost/news.php.
References
- 20060630 FreeHost "misc.php & news.php" SQL Injection mailing-list
- 1208 third-party-advisory