Description
SQL injection vulnerability in admin/pages.php in Subdreamer CMS 3.x.x allows remote attackers to execute arbitrary SQL commands via the categoryids[] parameter in an update_pages action.
References
- ADV-2010-1476 vdb-entry
- 40849 vdb-entry
- 20100614 [MajorSecurity SA-073]Subdreamer CMS - SQL injection vulnerability mailing-list
- http://packetstormsecurity.org/1006-advisories/major_rls73.txt
- subdreamercms-pages-sql-injection(59441) vdb-entry
- http://www.majorsecurity.net/subdreamer_cms_sql_injection.php