CVE-2006-3348

HSPcomplete versions 3.2.2 and 3.3 Beta (and earlier) are affected by multiple SQL injection vulnerabilities. The flaw allows remote attackers to execute arbitrary SQL commands via the (1) type parameter in report.php and (2) level parameter in custom_buttons.php. The documents do not specify a p...