CVE-2005-3963: Undefined Security Weakness

SQL injection vulnerability in session.php in DotClear before 1.2.3 allows remote attackers to execute arbitrary SQL commands via the dcxd parameter in a cookie...

CVE-2005-3963

DotClear contains an SQL injection vulnerability in session.php (pre-1.2.3) exploitable via the dc_xd cookie, allowing remote attackers to execute arbitrary SQL. Impact is information disclosure/modification and potential server compromise as described in the CVE records. The connected documents ...