CVE-2004-2322

CVE-2004-2322 affects phpWebSite before 0.9.3-2. SQL injection exists in the announce and notes modules (ANN_id parameter) that allows remote attackers to execute arbitrary SQL queries. Impact: partial confidentiality/integrity/availability. Exploitation details are not provided in the available ...