Security Advisory
CVE-2008-0129
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
SQL injection vulnerability in starnet/addons/slideshow_full.php in Site@School 2.3.10 and earlier allows remote attackers to execute arbitrary SQL commands via the album_name parameter.