Description
Multiple SQL injection vulnerabilities in archives.php in Particle Blogger 1.2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the month parameter and other unspecified vectors.
References
- 37468 vdb-entry
- 2799 third-party-advisory
- particle-archives-sql-injection(34583) vdb-entry
- 20070530 Particle Blogger 1.2.1 SQL Injection mailing-list