CVE-2006-3577

LifeType 1.0.5 contains a SQL injection in index.php via the Date parameter in a Default operation. The vulnerability arises from unsanitized user input used to build database queries, allowing remote attackers to execute arbitrary SQL. No specific fix/version is provided in the available documen...