CVE-2012-0906

CVE-2012-0906 describes an SQL injection in the Moviebase addon for deV!L’z Clanportal (DZCP) 1.5.5, exploitable through the id parameter in the showkat action to index.php, allowing remote SQL command execution. The affected software is DZCP with the Moviebase addon; no remediation details are p...