CVE-2006-3161

The CVE-2006-3161 entry concerns SaphpLesson 1.1 and earlier. The vulnerability is an SQL injection in misc.php, exploitable via the action parameter, allowing remote attackers to execute arbitrary SQL commands. CVSS 2.0 score is 7.5 (HIGH) with network attack vector and low complexity, no authen...

CVE-2005-3363

The CVE-2005-3363 issue is an SQL injection in Saphp Lesson (likely versions Lesson1.1 and Lesson2.0) that lets remote attackers inject arbitrary SQL via the forumid parameter in showcat.php and add.php. The description implies network access with low attack complexity and no authentication, with...