Sql injection

Article Directory Script 3.0 allows SQL Injection via the id parameter to author.php or category.php...

CVE-2017-15960

Affected software: Article Directory Script 3.0. Vulnerability: SQL injection via the GET parameter id in author.php and category.php. Root cause: improper handling/sanitization of id leading to SQL command injection. Impact (per sources): high to critical across confidentiality, integrity, and a...