Description
Multiple SQL injection vulnerabilities in akocomment allow remote attackers to execute arbitrary SQL commands via the (1) acparentid or (2) acitemid parameter to an unspecified component, different vectors than CVE-2006-1421.
References
- 38914 vdb-entry
- 20070629 akocomment SQL INJECTION (all version) mailing-list
- 2860 third-party-advisory