Description
SQL injection vulnerability in view.php in phpRaid 3.0.4, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the raid_id parameter.
References
- http://secunia.com/secunia_research/2006-47/advisory/
- phpraid-view-sql-injection(27457) vdb-entry
- 20200 third-party-advisory