CVE-2006-5140

The CVE is confirmed with concrete details in connected sources: Lappy512 PHP Krazy Image Host Script (phpkimagehost) 0.7a has an SQL injection in display.php exploitable via the id parameter. This allows remote attackers to execute arbitrary SQL commands, impacting confidentiality, integrity, an...