Description
Multiple SQL injection vulnerabilities in links.php in ssLinks 1.22 allow remote attackers to execute arbitrary SQL commands via the (1) go parameter and (2) id parameter in a rate action.
References
- 21736 third-party-advisory
- 20060928 Re: ssLinks <=v1.22 Multiple SQL Injection Vulnerabilities mailing-list
- ADV-2006-3443 vdb-entry
- 1505 third-party-advisory
- 20060902 ssLinks <=v1.22 Multiple SQL Injection Vulnerabilities mailing-list
- 19815 vdb-entry