CVE-2011-1556

SQL injection vulnerability in plugins/pdfClasses/pdfgen.php in Andy’s PHP Knowledgebase (Aphpkb) 0.95.4 allows remote attackers to execute arbitrary SQL commands via the pdfa parameter.

Date published : 2011-04-01

http://www.exploit-db.com/exploits/17061/

http://www.autosectools.com/Advisories/Andy%27s.PHP.Knowledgebase.Project.0.95.4_SQL.Injection_161.html