CVE-2004-1538

CVE-2004-1538 describes a SQL injection in PHP-Kit’s include.php affecting PHP-Kit versions 1.6.03 through 1.6.1, where an attacker can manipulate the id parameter to execute arbitrary SQL commands. This is a remote vulnerability with network attack vector and partial impact on confidentiality, i...