SQL injection vulnerability in start.php in Webace-Linkscript (wls) 1.3 Special Edition (SE) allows remote attackers to execute arbitrary SQL commands via the id parameter in a rubrik go action.
References
Configurations
Information
Published : 2007-09-12 13:17
Updated : 2017-09-28 18:29
NVD link : CVE-2007-4846
Mitre link : CVE-2007-4846
JSON object : View
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Products Affected
webace
- webace-linkscript