Multiple SQL injection vulnerabilities in show.php in BirthSys 3.1 allow remote attackers to execute arbitrary SQL commands via the $month variable. NOTE: a vector regarding the $date parameter and data.php (date.php) was originally reported, but this appears to be in error.
References
Configurations
History
No history.
Information
Published : 2006-02-19 00:02
Updated : 2024-02-28 10:42
NVD link : CVE-2006-0775
Mitre link : CVE-2006-0775
CVE.ORG link : CVE-2006-0775
JSON object : View
Products Affected
ridder_roeland
- birthsys
CWE