SQL injection vulnerability in saa.php in Andy's PHP Knowledgebase (Aphpkb) 0.95.3 and earlier allows remote attackers to execute arbitrary SQL commands via the aid parameter, a different vulnerability than CVE-2011-1546.  NOTE: some of these details are obtained from third party information.
                
            References
                    | Link | Resource | 
|---|---|
| http://www.vupen.com/english/advisories/2011/0802 | Vendor Advisory | 
| http://secunia.com/advisories/34476 | Vendor Advisory | 
| http://aphpkb.blogspot.com/2011/03/this-release-includes-security-fixes.html | Patch | 
Configurations
                    Configuration 1 (hide)
                                
                                
  | 
                        
Information
                Published : 2011-04-04 05:27
Updated : 2011-04-04 21:00
NVD link : CVE-2011-1555
Mitre link : CVE-2011-1555
JSON object : View
CWE
                
                    
                        
                        CWE-89
                        
            Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Products Affected
                aphpkb
- aphpkb
 


