CVE-2012-5000: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in jokes/index.php in the Witze addon 0.9 for deV!L'z Clanportal allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action...

PT-2012-5718

Name of the Vulnerable Software and Affected Versions Witze addon version 0.9 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the id parameter in a "show" action within the jokes/index.php file. Recommendations For Witze addon versio...