Security Advisory

CVE-2006-0942

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2006-03-01 02:00:00
Last updated 2024-08-07 16:56:15
Assigner mitre
State PUBLISHED

Description

SQL injection vulnerability in profil.php in PwsPHP 1.2.3, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the aff_news_form parameter, a different vulnerability than CVE-2005-1509.