CVE-2006-3394

SQL injection vulnerability in the files mod in index.php in BXCP 0.3.0.4 allows remote attackers to execute arbitrary SQL commands via the where parameter in a view action.

Date published : 2006-07-06

http://www.securityfocus.com/bid/18765

https://www.exploit-db.com/exploits/1975