CVE-2004-2263

CVE-2004-2263 describes a SQL injection vulnerability in the valid function of the PlaySMS project (fr_left.php) up to version 0.7, exploitable by tampering with the vc2 cookie to modify SQL statements. The CVSS base score is 7.5 (HIGH) with network access, low attack complexity, and no authentic...

CVE-2004-2263: Undefined Security Weakness

SQL injection vulnerability in the valid function in frleft.php in PlaySMS 0.7 and earlier allows remote attackers to modify SQL statements via the vc2 cookie...