CVE-2006-1578

Multiple SQL injection vulnerabilities in Keystone Digital Library Suite DLS 1.5.4 and earlier allow remote attackers to execute arbitrary SQL commands via the subjecttypeid parameter in 1 the index page and 2 the search module...

CVE-2006-1578

CVE-2006-1578 affects Keystone Digital Library Suite (DLS) up to version 1.5.4. The vulnerability is an SQL injection in the subject_type_id parameter on both the index page and the search module, allowing remote attackers to execute arbitrary SQL commands. The available documents do not provide ...

Keystone DLS SQL vuln.

Keystone DLS SQL vuln. Vuln. discovered by : r0t Date: 31 march 2006 vendor:http://www.indexdata.dk/keystone/ affected versions: 1.5.4 and prior orginal advisory: http://pridels.blogspot.com/2006/03/keystone-dls-sql-vuln.html Vuln. description: Keystone Digital Library Suite contains a flaw that...