CVE-2006-5285 - Almighty Hunks

Description

SQL injection vulnerability in index.php in XeoPort 0.81 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the xp_body_text parameter.

Reference

http://www.securityfocus.com/bid/20475 http://securitytracker.com/id?1017055 http://securityreason.com/securityalert/1735 http://marc.info/?l=full-disclosure&m=116062269104422&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/29479 http://www.securityfocus.com/archive/1/448424/100/0/threaded