Description (CNA)
Multiple SQL injection vulnerabilities in FretsWeb 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) name parameter to player.php and the (2) hash parameter to song.php.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://www.exploit-db.com/exploits/8980
- http://sourceforge.net/forum/forum.php?forum_id=966939
- http://secunia.com/advisories/35492
- http://osvdb.org/55168
- http://osvdb.org/55167
ADP enrichment
No English description supplied.