NetSight
IP …
high7.5

CVE-2011-5175

SQL injection vulnerability in search.php in Banana Dance, possibly B.1.5 and earlier, allows remote attackers to execute arbitrary SQL commands via the catego…

Impact

SQL injection vulnerability in search.php in Banana Dance, possibly B.1.5 and earlier, allows remote attackers to execute arbitrary SQL commands via the category parameter.

Affected products

VendorProductAffected versions
BananadanceBanana Dance
through 1.5
Version 0.9

Weakness classification

CWE-89

References