CVE-2006-3348

Multiple SQL injection vulnerabilities in HSPcomplete 3.2.2 and 3.3 Beta and earlier allow remote attackers to execute arbitrary SQL commands via the 1 type parameter in report.php and 2 level parameter in custombuttons.php...

CVE-2006-3348

HSPcomplete versions 3.2.2 and 3.3 Beta (and earlier) are affected by multiple SQL injection vulnerabilities. The flaw allows remote attackers to execute arbitrary SQL commands via the (1) type parameter in report.php and (2) level parameter in custom_buttons.php. The documents do not specify a p...