Multiple SQL injection vulnerabilities in Gregarius 0.5.2 allow remote attackers to execute arbitrary SQL commands via the (1) folder parameter to feed.php or (2) rss_query parameter to search.php.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Gregarius | Gregarius | 0.5.2 (including) | 0.5.2 (including) |