CVE-2005-3876 Information

Description

Multiple SQL injection vulnerabilities in adcbrowres.php in AD Center ADC2000 NG Pro 1.2 and NG Pro Lite allow remote attackers to execute arbitrary SQL commands via the (1) cat and (2) lang parameters.

Reference

http://pridels0.blogspot.com/2005/11/adc2000-ng-pro-sql-inj-vuln.html http://secunia.com/advisories/17744 http://www.osvdb.org/21131 http://www.securityfocus.com/bid/15595 http://www.vupen.com/english/advisories/2005/2613