CVE-2007-3000

CVE-2007-3000 concerns multiple SQL injection vulnerabilities in the PHP JackKnife (PHPJK) package. The issues allow remote attackers to execute arbitrary SQL commands by supplying crafted input to two parameters: (1) iCategoryUnq in G_Display.php and (2) iSearchID in Search/DisplayResults.php. A...