Description (CNA)
Multiple SQL injection vulnerabilities in Clever Copy 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ID parameter to postcomment.php and the (2) album parameter to gallery.php.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/bid/27335
- http://securityreason.com/securityalert/3553
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39746
- http://www.securityfocus.com/archive/1/486492/100/0/threaded
- http://secunia.com/advisories/28560
ADP enrichment
No English description supplied.