CVE-2010-4357

UNRATEDJSON export Create alert

Description

SQL injection vulnerability in comments.php in SiteEngine 7.1 allows remote attackers to execute arbitrary SQL commands via the module parameter.

Affected products

boka / siteengine7.1 – 7.1

References

EXPLOIThttp://www.exploit-db.com/exploits/15612
MISChttp://www.securityfocus.com/bid/45056
VENDOR_ADVISORYhttp://secunia.com/advisories/42353