SQL injection vulnerability in index.php in PHP Dir... · CVE-2009-3970 · GitHub Advisory Database · GitHub

SQL injection vulnerability in index.php in PHP Dir...

Moderate severity Unreviewed Published May 2, 2022 to the GitHub Advisory Database • Updated Jan 31, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

SQL injection vulnerability in index.php in PHP Dir Submit (aka WebsiteSubmitter or Submitter Script) allows remote authenticated users to execute arbitrary SQL commands via the aid parameter in a showarticle action.

References

Published by the National Vulnerability Database

Nov 18, 2009

Published to the GitHub Advisory Database May 2, 2022

Last updated Jan 31, 2023