Description
Multiple SQL injection vulnerabilities in OmniStar Article Manager allow remote attackers to execute arbitrary SQL commands via the (1) article_id parameter in (a) articles/comments.php and (b) articles/article.php, and the (2) page_id parameter in (c) articles/pages.php.
References
- 20061108 omnistar article manager [multiples injection sql] mailing-list
- 20990 vdb-entry
- 1865 third-party-advisory
- http://s-a-p.ca/index.php?page=OurAdvisories&id=10
- 22794 third-party-advisory
- 1017208 vdb-entry
- ADV-2006-4449 vdb-entry
- omnistar-article-articleid-sql-injection(30166) vdb-entry