| Package | Affected versions | Patched versions |
|---|---|---|
| aphpkb | = 0.1= 0.2= 0.21= 0.3= 0.31= 0.33= 0.35= 0.361= 0.371= 0.38= 0.39= 0.4= 0.41= 0.42= 0.43= 0.44= 0.45= 0.5= 0.51= 0.52= 0.53= 0.54= 0.55= 0.56= 0.57= 0.58= 0.59= 0.6= 0.61= 0.62= 0.63= 0.64= 0.65= 0.66= 0.67= 0.70= 0.71= 0.72= 0.73= 0.74= 0.75= 0.76= 0.77= 0.78= 0.79= 0.80= 0.81= 0.82= 0.83= 0.84= 0.85= 0.86= 0.87= 0.88= 0.88.5= 0.88.6= 0.88.7= 0.88.8= 0.89= 0.9= 0.91= 0.92= 0.92.1= 0.92.2= 0.92.3= 0.92.4= 0.92.5= 0.92.6= 0.92.7= 0.92.8= 0.92.9= 0.93.1= 0.93.2= 0.93.3= 0.93.4= 0.93.5= 0.93.6= 0.93.7= 0.93.8= 0.93.9= 0.94.1= 0.94.2= 0.94.3= 0.94.4= 0.94.5= 0.94.6= 0.94.7= 0.94.8= 0.94.9= 0.95= 0.95.1≤ 0.95.2 |
Multiple SQL injection vulnerabilities in Andy's PHP Knowledgebase (Aphpkb) before 0.95.3 allow remote attackers to execute arbitrary SQL commands via the s parameter to (1) a_viewusers.php or (2) keysearch.php; and allow remote authenticated administrators to execute arbitrary SQL commands via the (3) id or (4) start parameter to pending.php, or the (5) aid parameter to a_authordetails.php. NOTE: some of these details are obtained from third party information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free