Unscored CVE-2004-1538 EUVD-2004-1532GHSA-24cj-jcg7-v9g9

SQL injection vulnerability in include.php in PHPKIT 1.6.03 through 1.6.1 allows remote attackers to execute arbitrary SQL commands via the…

Published Feb 19, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

SQL injection vulnerability in include.php in PHPKIT 1.6.03 through 1.6.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.

References

phpkit-include-sql-injection(18205) vdb-entry
11725 vdb-entry
20041122 PHPKIT SQL Injection, XSS mailing-list
13262 third-party-advisory