CVE-2005-4554

CVE-2005-4554 describes multiple SQL injection vulnerabilities in DEV web management system 1.5 and earlier. The issues allow remote attackers to execute arbitrary SQL commands via: (1) the cat parameter in openforum.php (index.php), (2) the cat parameter in getfile.php, and (3) the target parame...