Description (CNA)
Multiple SQL injection vulnerabilities in Link Exchange Lite allow remote attackers to execute arbitrary SQL commands via (1) the search engine field to search.asp and (2) psearch parameter to linkslist.asp.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://s-a-p.ca/index.php?page=OurAdvisories&id=53
- http://www.vupen.com/english/advisories/2006/4656
- http://securityreason.com/securityalert/1920
- http://www.securityfocus.com/archive/1/452256/100/0/threaded
- http://www.securityfocus.com/bid/21239
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30460
- http://secunia.com/advisories/23068
ADP enrichment
No English description supplied.
- http://s-a-p.ca/index.php?page=OurAdvisories&id=53
- http://www.vupen.com/english/advisories/2006/4656
- http://securityreason.com/securityalert/1920
- http://www.securityfocus.com/archive/1/452256/100/0/threaded
- http://www.securityfocus.com/bid/21239
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30460
- http://secunia.com/advisories/23068