Description
SQL injection vulnerability in the login function in auth.inc in Stefan Frech online-bookmarks 0.6.12 allows remote attackers to execute arbitrary SQL commands via the (1) username and possibly the (2) password parameter. NOTE: some of these details are obtained from third party information.
References
- 23169 third-party-advisory
- 21422 vdb-entry
- ADV-2006-4849 vdb-entry
- 20061203 Online BookMarks Multiple SQL Injection/XSS Vulnerabilities mailing-list
- onlinebookmarks-login-sql-injection(30696) vdb-entry
- http://www.vigilon.com/resources/120406.html