high7.5
CVE-2005-3951
SQL injection vulnerability in survey.php in PHP Labs Survey Wizard allows remote attackers to execute arbitrary SQL commands via the sid parameter.
Impact
SQL injection vulnerability in survey.php in PHP Labs Survey Wizard allows remote attackers to execute arbitrary SQL commands via the sid parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Php Labs | Survey Wizard | All versions |
References
- NVD record
- CVE.org record
- http://pridels0.blogspot.com/2005/11/survey-wizard-sid-sql-injection-vuln.html
- http://secunia.com/advisories/17686
- http://www.osvdb.org/21104
- http://www.vupen.com/english/advisories/2005/2553
- http://pridels0.blogspot.com/2005/11/survey-wizard-sid-sql-injection-vuln.html
- http://secunia.com/advisories/17686
- http://www.osvdb.org/21104
- http://www.vupen.com/english/advisories/2005/2553