CVE-2006-3926

PhpProBid 5.24 is vulnerable to multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL commands by supplying crafted values to viewfeedback.php (view/start parameters) or categories.php (orderType parameter). Root cause: inadequate input validation/sanitization for thes...