CVE-2006-3244

Anthill 0.2.6 and earlier are affected by SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via (1) the order parameter in buglist.php and (2) the bug parameter in query.php. Root cause: improper handling of user-supplied input leads to query manipulation...

CVE-2006-3244: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Anthill 0.2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 order parameter in buglist.php and the 2 bug parameter in query.php...