Description
Multiple SQL injection vulnerabilities in freelancerKit 2.35 allow remote attackers to execute arbitrary SQL commands via unspecified vectors to the (1) notes and (2) tickets components.
References
- freelancerkit-multiple-sql-injection(73105) vdb-entry
- 51946 vdb-entry
- http://www.vulnerability-lab.com/get_content.php?id=402
- 47766 third-party-advisory