Sql injection

2008-07-0318:41:00

PRIOn knowledge base

www.prio-n.com

9.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

28.0%

JSON

Multiple SQL injection vulnerabilities in PHPEasyData 1.5.4 allow remote attackers to execute arbitrary SQL commands via (1) the annuaire parameter to annuaire.php or (2) the username field in admin/login.php.

CPENameOperatorVersion
phpeasydataeq1.5.4

CPE	Name	Operator	Version
	phpeasydata	eq	1.5.4

References

securityreason.com/securityalert/3969

www.securityfocus.com/archive/1/493273/100/0/threaded

www.securityfocus.com/bid/29659