Description
SQL injection vulnerability in admin/default.asp in Jetstat.com JS ASP Faq Manager 1.10 and earlier allows remote attackers to execute arbitrary SQL commands via the uid parameter, a different vector than CVE-2006-4463. NOTE: the provenance of this information is unknown; the details are obtained from third party information.
References
- 28266 vdb-entry
- jsaspfaqmanager-admin-sql-injection(28638) vdb-entry
- ADV-2006-3415 vdb-entry
- 21674 third-party-advisory
- 19761 vdb-entry