Description
Multiple SQL injection vulnerabilities in Carey Briggs PHP/MYSQL Timesheet 1 and 2 allow remote attackers to execute arbitrary SQL commands via the (1) yr, (2) month, (3) day, and (4) job parameters in (a) index.php and (b) changehrs.php.
References
- 16620 vdb-entry
- ADV-2006-0522 vdb-entry
- 18822 third-party-advisory
- 451 third-party-advisory
- 20060217 [eVuln] PHP/MYSQL Timesheet Multiple SQL Injection Vulnerabilities mailing-list
- http://www.evuln.com/vulns/67/summary.html
- phpmysqltimesheet-multiple-sql-injection(24567) vdb-entry