SQL injection vulnerability in deleteSession() in DB_eSession library 1.0.2 and earlier, as used in multiple products, allows remote attackers to execute arbitrary SQL commands via the $_sess_id_set variable, which is usually derived from PHPSESSID.
References
Configurations
History
No history.
Information
Published : 2006-02-19 00:02
Updated : 2024-02-04 16:52
NVD link : CVE-2006-0774
Mitre link : CVE-2006-0774
CVE.ORG link : CVE-2006-0774
JSON object : View
Products Affected
lawrence_osiris
- db_esession
CWE