Description
Multiple SQL injection vulnerabilities in PHP Surveyor 0.98 allows remote attackers to execute arbitrary SQL commands via (1) the sid, start, and id parameters to browse.php, the sid parameter to (2) dataentry.php, (3) export.php, (4) admin.php, (5) conditions.php, (6) spss.php, (7) deletesurvey.php, (8) dumpsurvey.php, or (9) statistics.php, or the lid parameter to (10) labels.php or (11) dumplabel.php.
References
- php-surveyor-sql-injection(21444) vdb-entry
- 18102 vdb-entry
- 16123 third-party-advisory
- 18098 vdb-entry
- 18105 vdb-entry
- 18107 vdb-entry
- 20050720 Multiple Vulnerabilities in PHP Surveyor mailing-list
- 18100 vdb-entry
- 18108 vdb-entry
- 18106 vdb-entry
- 1014538 vdb-entry
- 14331 vdb-entry
- 18104 vdb-entry
- 18099 vdb-entry
- 18103 vdb-entry
- 18101 vdb-entry