Description
Multiple SQL injection vulnerabilities in default.asp in Xenis.creator CMS allow remote attackers to execute arbitrary SQL commands via the (1) nav, (2) s, or (3) print parameters.
References
- 22716 third-party-advisory
- 20908 vdb-entry
- 20061104 Xenis.creator CMS - Multiple Cross mailing-list
- http://www.majorsecurity.de/index_2.php?major_rls=major_rls31
- xeniscreatorcms-default-sql-injection(30017) vdb-entry
- 20061104 Re: MajorSecurity Advisory #31]Xenis.creator CMS - Multiple Cross mailing-list
- ADV-2006-4470 vdb-entry
- 1017162 vdb-entry