CVE-2004-2322

SQL injection vulnerability in the (1) announce and (2) notes modules of phpWebSite before 0.9.3-2 allows remote attackers to execute arbitrary SQL queries, as demonstrated using the ANN_id parameter to the announce module.

Date published : 2005-08-16

http://sourceforge.net/tracker/index.php?func=detail&aid=892174&group_id=15539&atid=115539

http://www.systemsecure.org/advisories/ssadvisory13022004.php