CVE-2006-1420

Description

SQL injection vulnerability in print.php in SaphpLesson 2.0 allows remote attackers to execute arbitrary SQL commands via the lessid parameter.

Affected products

• arabless / saphplesson2.0 – 2.0

References

• MISChttp://www.osvdb.org/24254
• MISChttp://www.securityfocus.com/bid/17239
• MISChttp://www.securityfocus.com/archive/1/428891/100/0/threaded
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/25453
• MISChttp://securityreason.com/securityalert/629