Description
Multiple SQL injection vulnerabilities in Ixprim 1.2 allow remote attackers to execute arbitrary SQL commands via the story_id parameter to ixm_ixpnews.php, and unspecified other vectors.
References
- 20061221 Ixprim CMS 1.2 Remote Blind SQL Injection Exploit mailing-list
- ADV-2006-5133 vdb-entry
- 21710 vdb-entry
- 23453 third-party-advisory
- http://acid-root.new.fr/poc/16061221.txt
- 2073 third-party-advisory