CVE-2005-3963

DotClear contains an SQL injection vulnerability in session.php (pre-1.2.3) exploitable via the dc_xd cookie, allowing remote attackers to execute arbitrary SQL. Impact is information disclosure/modification and potential server compromise as described in the CVE records. The connected documents ...