CVE-2006-5285

SQL injection vulnerability in index.php in XeoPort 0.81, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the xp_body_text parameter.

Date published : 2006-10-13

http://www.securityfocus.com/bid/20475

http://www.securityfocus.com/archive/1/448424/100/0/threaded