Security Advisory
CVE-2005-3844
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
SQL injection vulnerability in phpWordPress PHP News and Article Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the (1) poll and (2) category parameters to index.php, and (3) the ctg parameter in an archive action.