Description
SQL injection vulnerability in spaces/emailuser.php in Interact 2.4.1 allows remote attackers to execute arbitrary SQL commands via the email_user_key parameter.
References
- 4537 third-party-advisory
- 32014 vdb-entry
- http://sourceforge.net/tracker/index.php?func=detail&aid=2208205&group_id=69681&atid=525406
- 32359 third-party-advisory
- interact-emailuser-sql-injection(46267) vdb-entry
- 20081031 Secunia Research: Interact SQL Injection and Cross-Site Request Forgery mailing-list
- http://secunia.com/secunia_research/2008-44/