← Database

CVE-2008-2177

MEDIUM CVSS: 6.8 Published: 2008-05-13 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in phpDirectorySource 1.1.06, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) lid parameter to show.php and the (2) login parameter to admin.php.

Affected Platforms

Php Directory Source Phpdirectorysource

Weakness Type

CWE-89

References