Description
SQL injection vulnerability in index.php in SmE FileMailer 1.21 allows remote attackers to execute arbitrary SQL commands via the us parameter.
References
- 32832 vdb-entry
- smefilemailer-login-sql-injection(31533) vdb-entry
- 20070117 Source VERIFY of SMe FileMailer 1.21 SQL injection mailing-list
- ADV-2007-0221 vdb-entry