It has been reported that QuoteEngine may be prone to an SQL injection vulnerability in various variables that may allow attackers to pass malicious input to database queries. This vulnerability exists due to insufficient sanitization of user-supplied input and may only be exploited by users known to a victim's eggdrop. This issue is reported to exist in QuoteEngine 1.1.0 and prior.
It has been reported that QuoteEngine may be prone to an SQL injection vulnerability in various variables that may allow attackers to pass malicious input to database queries. This vulnerability exists due to insufficient sanitization of user-supplied input and may only be exploited by users known to a victim's eggdrop. This issue is reported to exist in QuoteEngine 1.1.0 and prior.