Description
SQL injection vulnerability in survey.php in PHP Labs Survey Wizard allows remote attackers to execute arbitrary SQL commands via the sid parameter.
References
- http://pridels0.blogspot.com/2005/11/survey-wizard-sid-sql-injection-vuln.html
- 21104 vdb-entry
- 17686 third-party-advisory
- ADV-2005-2553 vdb-entry