Description
SQL injection vulnerability in GeoNetwork opensource before 2.0.3 allows remote attackers to execute arbitrary SQL commands, and complete a login, via unspecified vectors.
References
- 22502 third-party-advisory
- http://sourceforge.net/project/shownotes.php?release_id=457195
- ADV-2006-4151 vdb-entry
- geonetwork-unspecified-sql-injection(29771) vdb-entry
- 20671 vdb-entry