CVE-2011-5076

The CVE-2011-5076 entry describes an SQL injection in HDWiki’s model/comment.class.php for HDWiki 5.0/5.1 (and possibly other versions), exploitable via PATH_INFO to index.php, allowing remote execution of arbitrary SQL commands. Root cause: unsafe SQL construction in the affected file. Documents...