Description
SQL injection vulnerability in directory.php in Super Link Exchange Script 1.0 might allow remote attackers to execute arbitrary SQL queries via the cat parameter.
References
- 20060525 Super Link Exchange Script v1.0 mailing-list
- 2285 third-party-advisory
- superlinkexchange-directory-sql-injection(26720) vdb-entry