Sql injection

SQL injection vulnerability in engine.php in Simple PHP Agenda 2.2.8 allows remote attackers to execute arbitrary SQL commands via the priority parameter in an addTodo action...

CVE-2012-2925

SQL injection vulnerability in engine.php in Simple PHP Agenda 2.2.8 allows remote attackers to execute arbitrary SQL commands via the priority parameter in an addTodo action...

CVE-2012-2925: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in engine.php in Simple PHP Agenda 2.2.8 allows remote attackers to execute arbitrary SQL commands via the priority parameter in an addTodo action...

PT-2012-4371

Name of the Vulnerable Software and Affected Versions Simple PHP Agenda version 2.2.8 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the priority parameter in an "addTodo" action. Recommendations For Simple PHP Agenda version 2.2.8, consider...