CVE-2005-3951

Summary: There is a SQL injection vulnerability in PHP Labs Survey Wizard’s survey.php triggered by the sid parameter, allowing remote attackers to execute arbitrary SQL commands (root cause: unsanitized sid input). Impact: partial confidentiality, integrity, and availability (CVSSv2 base score 7...