CVE-2011-5175

SQL injection vulnerability in search.php in Banana Dance, possibly B.1.5 and earlier, allows remote attackers to execute arbitrary SQL commands via the category parameter...

CVE-2011-5175

CVE-2011-5175 affects Banana Dance prior to version B.1.5, with a vulnerability in the file search.php where the category parameter enables an SQL injection. The root cause is unsafe handling/concatenation of user input in the query, allowing remote attackers to execute arbitrary SQL commands. Th...