CVE-2010-4986

SQL injection vulnerability in detail.php in Simple Document Management System SDMS allows remote attackers to execute arbitrary SQL commands via the docid parameter...

CVE-2010-4986

The CVE-2010-4986 entry concerns the Simple Document Management System (SDMS). The affected component is the PHP page detail.php, where the doc_id parameter is vulnerable to SQL injection. Root cause: improper handling of user-supplied doc_id leading to arbitrary SQL execution. Documented impact ...