CVE-2014-8766

Multiple SQL injection vulnerabilities in Allomani Weblinks 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter in a browse action to index.php or 2 unspecified parameters to admin.php...

CVE-2014-8766

CVE-2014-8766 involves multiple SQL injection vulnerabilities in Allomani Weblinks 1.0. The affected component is the Weblinks application (index.php browse action and admin.php) where attacker-supplied input in the cat parameter (in browse) or other unspecified parameters (in admin) can lead to ...