Description
SQL injection vulnerability in saa.php in Andy's PHP Knowledgebase (Aphpkb) 0.95.3 and earlier allows remote attackers to execute arbitrary SQL commands via the aid parameter, a different vulnerability than CVE-2011-1546. NOTE: some of these details are obtained from third party information.
References
- http://aphpkb.blogspot.com/2011/03/this-release-includes-security-fixes.html
- ADV-2011-0802 vdb-entry
- 34476 third-party-advisory