Description
SQL injection vulnerability in index.php in Bartels Schoene ConPresso before 4.0.5a allows remote attackers to execute arbitrary SQL commands via the nr parameter.
References
- 22145 third-party-advisory
- conpressocms-index-sql-injection(29275) vdb-entry
- 20060929 [MajorSecurity Advisory #28]ConPresso CMS - Multiple Cross Site Scripting and SQL Injection Issues mailing-list
- 20273 vdb-entry
- http://www.majorsecurity.de/index_2.php?major_rls=major_rls28
- 1671 third-party-advisory
- http://download.compresso.de/compresso-4.0.5a.zip
- ADV-2006-3868 vdb-entry