NuytsTech Security

CVE-2005-4010

by ·

SQL injection vulnerability in KBase Express 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) id parameter to category.php and (2) search parameters to search.php.

Date published : 2005-12-05

http://www.securityfocus.com/bid/15635

http://pridels0.blogspot.com/2005/11/kbase-express-sql-inj-vuln.html

Tags: