CVE-2014-3962

CVE-2014-3962 affects Videos Tube 1.0, with SQL injection vulnerabilities in two PHP scripts (videocat.php and single.php). The root cause is improper handling of URL parameters, enabling remote attackers to construct arbitrary SQL commands. The vulnerability permits attacks without user authenti...