PT-2012-2054

Name of the Vulnerable Software and Affected Versions HDWiki versions 5.0 through 5.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the PATH INFO to index.php, specifically targeting the model/comment.class.php file. Recommendation...