CVE-2011-1556

CVE-2011-1556 describes an SQL injection in Andy’s PHP Knowledgebase (Aphpkb) 0.95.4, specifically in plugins/pdfClasses/pdfgen.php where the pdfa parameter can be manipulated to execute arbitrary SQL commands remotely. Affected component is the pdfgen.php module within pdfClasses. The available ...