CVE-2006-4748

Multiple SQL injection vulnerabilities in F-ART BLOG:CMS 4.1 allow remote attackers to execute arbitrary SQL commands via the 1 xagent, 2 xpath, 3 xreferer, and 4 xdns parameters in a admin/plugins/NPLog.php, and the 5 pitem parameter in b admin/plugins/NPPoll.php; and allow remote authenticated...