PT-2015-3667

Name of the Vulnerable Software and Affected Versions TopicsViewer version 3.0 Beta 1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter to several API endpoints, including "edit block.php", "edit cat.php", "edit note.php", and...