CVE-2005-3877

Multiple SQL injection vulnerabilities in Simple Document Management System SDMS 2.0-CVS and earlier allow remote attackers to execute arbitrary SQL commands via the 1 folderid parameter in list.php and 2 mid parameter in a view action to messages.php...

SDMS 2.0 SQL inj. vuln.

Simple Document Management System SQL injection Vuln. Vuln. dicovered by : r0t Date: 27 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/sdms-20-sql-inj-vuln.html Vendor:http://sdms.cafuego.net/ affected version: 2.0-CVS and prior Product Description: SDMS uses PHP to provide you wi...