CVE-2006-1330

CVE-2006-1330 : Multiple SQL injection vulnerabilities in phpWebsite 0.83 and earlier allow remote attackers to execute arbitrary SQL commands via the sid parameter to (1) friend.php or (2) article.php . This entry is referenced by the NVD listing, which assigns a base score of 7.5 (HIGH) with ne...