Description
SQL injection vulnerability in details.php in YourFreeWorld Programs Rating Script allows remote attackers to execute arbitrary SQL commands via the id parameter.
References
- ADV-2008-2991 vdb-entry
- 30759 vdb-entry
- http://www.packetstormsecurity.org/0808-exploits/prograte-sql.txt
- 31550 third-party-advisory
- programsrating-details-sql-injection(44566) vdb-entry