CVE-2005-0292

PHP Gift Registry (phpGiftReg) 1.4.0 (and possibly earlier versions before 1.5.0b1) contains multiple SQL injection vulnerabilities in index.php. The issues allow remote attackers to inject SQL via the parameters messageid, shopper, shopfor, or itemid, potentially enabling arbitrary SQL command e...