CVE-2010-3212

Seagull (PHP) is vulnerable to SQL injection in index.php (vulnerable in 0.6.7 and earlier) via the frmQuestion parameter in a retrieve action, combined with PATH_INFO for user/password. OpenVAS also notes multiple remote file inclusion vulnerabilities. Impact per sources: remote attacker can exe...