PT-2012-4354

Name of the Vulnerable Software and Affected Versions Viscacha version 0.8.1.1 Description The issue concerns SQL injection vulnerabilities in the admin/bbcodes.php file. Remote attackers can execute arbitrary SQL commands by manipulating certain parameters. The vulnerable parameters are...

CVE-2012-2908: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in admin/bbcodes.php in Viscacha 0.8.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 bbcodeexample, 2 buttonimage, or 3 bbcodetag parameter...