CVE-2007-5485 – KwsPHP mg2 SQL Injection

Description

SQL injection vulnerability in index.php in the mg2 1.0 module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the album parameter.


Vulnerability Information