CVE

Id
15373  
CVE No.
CVE-2005-4169  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in eFiction 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) let parameter in a viewlist action to authors.php and (2) sid parameter to viewstory.php.  
Phase
Assigned (20051211)  
Votes
None (candidate not yet proposed)  
Comments