Description
Multiple SQL injection vulnerabilities in Pligg before 1.1.1 allow remote attackers to execute arbitrary SQL commands via the title parameter to (1) storyrss.php or (2) story.php.
References
- 67068 vdb-entry
- 42408 vdb-entry
- 67067 vdb-entry
- 40931 third-party-advisory
- http://www.pligg.com/blog/991/pligg-cms-1-1-1-release/
- http://secunia.com/secunia_research/2010-111/