CVE-2011-1556

CVE-2011-1556 describes an SQL injection in Andy’s PHP Knowledgebase (Aphpkb) 0.95.4, specifically in plugins/pdfClasses/pdfgen.php where the pdfa parameter can be manipulated to execute arbitrary SQL commands remotely. Affected component is the pdfgen.php module within pdfClasses. The available ...

Andy's PHP KnowledgeBase 0.95.4 - SQL Injection

------------------------------------------------------------------------ Software................Andy's PHP Knowledgebase Project 0.95.4 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://www.aphpkb.org/ Discovery Date..........3/27/2011 Test...