• info
• discussion
• exploit
• solution
• references

DotClear Session.PHP SQL Injection Vulnerability

Solution:
The vendor has released an update addressing this issue.


Dotclear Dotclear 1.2.1

• DotClear dotclear-1.2.3.tar.gz
  http://www.dotclear.net/download/dotclear-1.2.3.tar.gz

Dotclear Dotclear 1.2.2

• DotClear dotclear-1.2.3.tar.gz
  http://www.dotclear.net/download/dotclear-1.2.3.tar.gz