CVE-2005-1875

Multiple SQL injection vulnerabilities in list.php in Exhibit Engine EE 1.22 allow remote attackers to execute arbitrary SQL commands via the 1 searchrow, 2 sortrow, 3 order or 4 perpage parameter...

[Full-disclosure] SEC-CONSULT SA20050602-2 :: Exhibit Engine Blind SQL Injection

SEC-CONSULT Security Advisory 20050602-2 ============================================================================= title: Exhibit Engine Blind SQL Injection program: Exhibit Engine vulnerable version: 1.22, 1.54 RC4 homepage: http://photography-on-the.net/ee/...

Exhibit Engine < 1.5 RC 5 list.php Multiple Parameter SQL Injection

Binary data 2944.prm...