CVE-2008-2177

CVE-2008-2177 affects phpDirectorySource 1.1.06 with SQL injection vulnerabilities when magic_quotes_gpc is disabled. The two injectable vectors are the lid parameter to show.php and the login parameter to admin.php, allowing remote attackers to execute arbitrary SQL commands. Public sources in t...