Description (CNA)
Multiple SQL injection vulnerabilities in eintragen.php in GaesteChaos 0.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) gastname, (2) gastwohnort, or (3) gasteintrag parameters.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://marc.info/?l=full-disclosure&m=115464286427745&w=2
- http://www.vupen.com/english/advisories/2006/3155
- http://secunia.com/advisories/21357
- http://www.securityfocus.com/archive/1/442205/100/200/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28218
- http://www.securityfocus.com/bid/19343
ADP enrichment
No English description supplied.