Description
index.php in Nwom topsites 3.0 allows remote attackers to obtain potentially sensitive information via a ' (quote) character in the o parameter, which forces a SQL error.
References
- 33462 vdb-entry
- 20070111 Nwom topsites v3.0 mailing-list
- 22012 vdb-entry
- 2149 third-party-advisory