Multiple SQL injection vulnerabilities in OmniStar Article Manager allow remote malicious users to execute arbitrary SQL commands via the (1) article_id parameter in (a) articles/comments.php and (b) articles/article.php, and the (2) page_id parameter in (c) articles/pages.php.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
omnistar interactive omnistar article manager |