Dev_15_sql_xpl.php.txt

---- Dev web management system ConfLoadDBtoPHP; include "admin/config.php"; echo "...

CVE-2005-4554: Undefined Security Weakness

Multiple SQL injection vulnerabilities in DEV web management system 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter in an openforum action openforum.php in index.php, 2 cat parameter in getfile.php, and 3 target parameter in downloadnow.php...