CVE-2005-3744

SQL injection vulnerability in index.php in phpComasy 0.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: an examination of the 0.7.5 source code suggests that there is no id parameter being handled directly by index.php...

CVE-2005-3744

CVE-2005-3744 describes a SQL injection vulnerability in the PHP application phpComasy, affecting version 0.7.5 and earlier. The flaw is claimed to be exploitable via the parameter in index.php, allowing remote attackers to execute arbitrary SQL commands. Note: the 0.7.5 source reportedly does n...