Description
SQL injection vulnerability in install.php in mcRefer allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: this issue has been disputed by a third party, stating that the file does not use a SQL database
References
- 20070211 Re: mcRefer SQL injection mailing-list
- 2235 third-party-advisory
- 22507 vdb-entry
- 33675 vdb-entry
- http://forums.avenir-geopolitique.net/viewtopic.php?t=2642
- 20070209 mcRefer SQL injection mailing-list