CVE-2006-5446

Description

SQL injection vulnerability in lobby/config.php in Casinosoft Casino Script (aka Masvet) 3.2 allows remote attackers to execute arbitrary SQL commands via the cfam parameter.

Affected products

• casinosoft / casino_script3.2 – 3.2

References

• VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2006/4131
• VENDOR_ADVISORYhttp://secunia.com/advisories/22398
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/29684
• MISChttp://www.securityfocus.com/bid/20646
• MISChttp://www.securitylab.ru/forum/read.php?FID=16&TID=23884