CVE-2012-0980

In phux Download Manager, CVE-2012-0980 describes an SQL injection vulnerability in download.php via the file parameter. The OpenVAS entry (phux Download Manager 'file' Parameter SQL Injection Vulnerability) confirms a classic SQLi risk allowing remote input to affect the database. The vulnerabil...