Description
Multiple SQL injection vulnerabilities in Link Exchange Lite allow remote attackers to execute arbitrary SQL commands via (1) the search engine field to search.asp and (2) psearch parameter to linkslist.asp.
References
- http://s-a-p.ca/index.php?page=OurAdvisories&id=53
- ADV-2006-4656 vdb-entry
- 1920 third-party-advisory
- 20061121 Link Exchange Lite [injection sql] mailing-list
- 21239 vdb-entry
- linkexchangelite-linkslist-sql-injection(30460) vdb-entry
- 23068 third-party-advisory