Description
SQL injection vulnerability in content.php in WSPortal 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the page parameter.
References
- 24513 vdb-entry
- 34164 vdb-entry
- 20070617 WSPortal version 1.0 SQL Injection Vulnerability mailing-list
- wsportal-content-sql-injection(34896) vdb-entry
- ADV-2007-2237 vdb-entry
- 20070617 WSPortal version 1.0 SQL Injection Vulnerability mailing-list
- http://www.netvigilance.com/advisory0033