Description
SQL injection vulnerability in report.php in Meeting Room Booking System (MRBS) before 1.4.2 allows remote attackers to execute arbitrary SQL commands via the typematch parameter. NOTE: some of these details are obtained from third party information.
References
- 35469 third-party-advisory
- 55872 vdb-entry
- http://mrbs.sourceforge.net/view_text.php?section=NEWS&file=NEWS
- mrbs-report-sql-injection(51772) vdb-entry