Description
SQL injection vulnerability in search_result.asp in Pre Projects Pre E-Learning Portal allows remote attackers to execute arbitrary SQL commands via the course_ID parameter.
References
- 38582 vdb-entry
- 62774 vdb-entry
- http://evilc0de.blogspot.com/2010/03/pre-e-learning-portal-sql-injection.html
- http://www.packetstormsecurity.com/1003-exploits/preelearningportal-sql.txt
- 38891 third-party-advisory
- preelearning-searchresult-sql-injection(56729) vdb-entry