Description (CNA)
Multiple SQL injection vulnerabilities in main.php in Chipmailer 1.09 allow remote attackers to execute arbitrary SQL commands via multiple parameters, as demonstrated by (1) anfang, (2) name, (3) mail, (4) anrede, (5) vorname, (6) nachname, (7) gebtag, (8) gebmonat, and (9) gebjahr.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://secunia.com/advisories/20643
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27158
- http://www.vupen.com/english/advisories/2006/2359
- http://www.securityfocus.com/bid/18463
- http://marc.info/?l=bugtraq&m=115024576618386&w=2
- http://securitytracker.com/id?1016315
ADP enrichment
No English description supplied.