Description
SQL injection vulnerability in mnoGoSearch before 3.3.12 allows remote attackers to execute arbitrary SQL commands via the hostname in a hypertext link.
References
- mnogosearch-hostnames-sql-injection(71884) vdb-entry
- 77949 vdb-entry
- 47272 third-party-advisory
- http://www.mnogosearch.org/doc33/msearch-changelog.html#changelog-3-3-12
- 51113 vdb-entry