Description
Multiple SQL injection vulnerabilities in AAIportal before 1.4.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
References
- 29557 vdb-entry
- aaiportal-unspecified-sql-injection(29406) vdb-entry
- 22150 third-party-advisory
- http://sourceforge.net/project/shownotes.php?release_id=451458
- 20414 vdb-entry
- ADV-2006-3952 vdb-entry
- http://aai-portal.sourceforge.net/