Site@School <= 2.3.10 (slideshow_full.php) SQL Injection Vulnerability

Description:

SQL injection vulnerability in starnet/addons/slideshow_full.php in Site@School 2.3.10 and earlier allows remote attackers to execute arbitrary SQL commands via the album_name parameter.

References:

• CVE-2008-0129
• BID-27120
• EDB-4832

Disclosure Date:

January 3, 2008