Adobe Dreamweaver 8 before 8.0.2 and MX 2004 can generate code that allows SQL injection attacks in the (1) ColdFusion, (2) PHP mySQL, (3) ASP, (4) ASP.NET, and (5) JSP server models.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Dreamweaver | Adobe | 7.0 (including) | 7.0 (including) |
| Dreamweaver | Adobe | 8.0 (including) | 8.0 (including) |
References
- http://archives.neohapsis.com/archives/bugtraq/2006-05/0194.html
- http://secunia.com/advisories/20054
- http://securitytracker.com/id?1016050
- http://www.adobe.com/support/security/bulletins/apsb06-07.html
- http://www.osvdb.org/25361
- http://www.securityfocus.com/bid/17928
- http://www.vupen.com/english/advisories/2006/1753
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26339
- http://archives.neohapsis.com/archives/bugtraq/2006-05/0194.html
- http://secunia.com/advisories/20054
- http://securitytracker.com/id?1016050
- http://www.adobe.com/support/security/bulletins/apsb06-07.html
- http://www.osvdb.org/25361
- http://www.securityfocus.com/bid/17928
- http://www.vupen.com/english/advisories/2006/1753
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26339