NetSight
IP …
high7.5

CVE-2005-1875

Multiple SQL injection vulnerabilities in list.php in Exhibit Engine (EE) 1.22 allow remote attackers to execute arbitrary SQL commands via the (1) search_row,…

Impact

Multiple SQL injection vulnerabilities in list.php in Exhibit Engine (EE) 1.22 allow remote attackers to execute arbitrary SQL commands via the (1) search_row, (2) sort_row, (3) order or (4) perpage parameter.

Affected products

VendorProductAffected versions
Exhibit EngineExhibit Engine
Versions 1.22, 1.54_rc4

References