CVE-2006-0973

CVE-2006-0973 describes an SQL injection vulnerability in topics.php of the Appalachian State University phpWebSite project (version 0.10.2 and earlier). The underlying issue is that the topic parameter is used unsafely in SQL queries, allowing remote attackers to inject arbitrary SQL commands. T...