CVE-2012-0983

The CVE-2012-0983 entry concerns a SQL injection in Scriptsez.net Ez Album. In the affected workflow, an attacker can supply a crafted value for the id parameter in a view action to index.php , enabling remote execution of arbitrary SQL commands. The vulnerability is reported with a High severity...