Description
SQL injection vulnerability in Files2Links F2L 3000 appliance 4.0.0, and possibly other versions and models, allows remote attackers to execute arbitrary SQL commands via unspecified parameters to the login page.
References
- 38310 third-party-advisory
- f2l3000-login-sql-injection(55950) vdb-entry
- 20100125 DDIVRT-2009-27 F2L-3000 files2links SQL Injection Vulnerability mailing-list
- 61976 vdb-entry
- http://packetstormsecurity.org/1001-advisories/DDIVRT-2009-27.txt