CVE-2005-1875

Exhibit Engine (EE) 1.22 is affected by multiple SQL injection vulnerabilities in list.php, exploitable via the parameters (1) search_row, (2) sort_row, (3) order, or (4) perpage, allowing remote attackers to execute arbitrary SQL. The connected sources confirm the vulnerable component and parame...