CVE-2006-3161

The CVE-2006-3161 entry concerns SaphpLesson 1.1 and earlier. The vulnerability is an SQL injection in misc.php, exploitable via the action parameter, allowing remote attackers to execute arbitrary SQL commands. CVSS 2.0 score is 7.5 (HIGH) with network attack vector and low complexity, no authen...