Description
Multiple SQL injection vulnerabilities in Clever Copy 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ID parameter to postcomment.php and the (2) album parameter to gallery.php.
References
- 27335 vdb-entry
- 3553 third-party-advisory
- clevercopy-postcomment-sql-injection(39746) vdb-entry
- 20080117 Clever Copy <=3.0 Multiple Remote Vulnerabilities mailing-list
- 28560 third-party-advisory