PHPKIT 1.6.x - 'b-day.php' Addon SQL Injection

source: https://www.securityfocus.com/bid/38891/info PHPKIT 'b-day.php' addon is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, acces...

PHPKit 1.6.1 - 'member.php' SQL Injection

source: https://www.securityfocus.com/bid/14629/info PHPKit is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromise of the...