CVE

Id
14880  
CVE No.
CVE-2005-3676  
Status
Candidate  
Description
SQL injection vulnerability in download.php in PhpWebThings 1.4.4 allows remote attackers to execute arbitrary SQL commands via the file parameter.  
Phase
Assigned (20051118)  
Votes
None (candidate not yet proposed)  
Comments