Description
SQL injection vulnerability in counterchaos.php in CounterChaos 0.48c and earlier allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header.
References
- counterchaos-counterchaos-sql-injection(28222) vdb-entry
- 1350 third-party-advisory
- http://www.frsirt.com/english/reference/17541
- 20060803 CounterChaos <= 0.48c SQL Injection Vulnerability mailing-list
- ADV-2006-3153 vdb-entry
- 19344 vdb-entry
- 21356 third-party-advisory