Description
Multiple SQL injection vulnerabilities in PHPYun 1.1.6 allow remote attackers to execute arbitrary SQL commands via the (1) provinceid parameter to search.php and the (2) e parameter to resumeview.php.
References
- 41756 third-party-advisory
- phpyun-multiple-sql-injection(62391) vdb-entry
- http://bbs.wolvez.org/viewtopic.php?id=172
- 43907 vdb-entry