← Database

CVE-2006-1330

HIGH CVSS: 7.5 Published: 2006-03-21 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in phpWebsite 0.83 and earlier allow remote attackers to execute arbitrary SQL commands via the sid parameter to (1) friend.php or (2) article.php.

Affected Platforms

Phpwebsite Phpwebsite

Weakness Type

CWE-89

References