Description
SQL injection vulnerability in out.ViewFolder.php in MyDMS before 1.4.2 allows remote attackers to execute arbitrary SQL commands via the folderid parameter.
References
- mydms-folderld-sql-injection(17054) vdb-entry
- 10996 vdb-entry
- 12340 third-party-advisory
- 20040820 Multiple vulnerabilities in MyDMS mailing-list