Description
SQL injection vulnerability in the reports system in OpenBiblio before 0.5.2 allows remote attackers with report privileges to execute arbitrary SQL commands via unspecified vectors.
References
- openbiblio-report-sql-injection(29318) vdb-entry
- ADV-2006-3867 vdb-entry
- 22238 third-party-advisory
- 20301 vdb-entry
- http://sourceforge.net/project/shownotes.php?release_id=451780