CVE-2006-3525

CVE-2006-3525 affects PHCDownload 1.0.0 Final and 1.0.0 Release Candidate 6 and earlier. The issue is an SQL injection in category.php allowing remote attackers to modify/execute arbitrary SQL via the id parameter. Documented impact: partial confidentiality, integrity, and availability consequenc...