PT-2011-1852

Name of the Vulnerable Software and Affected Versions A-Blog version 2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the words parameter in the "sources/search.php" endpoint. Recommendations For A-Blog version 2.0, consider restricting...