SQL Injection Vulnerabilities in Zomplog 3.4 by Zomplog
CVE-2005-3309
Currently unrated
What is CVE-2005-3309?
The Zomplog 3.4 application is susceptible to multiple SQL injection vulnerabilities that permit remote attackers to perform unauthorized SQL command execution. This can be achieved via the 'id' parameter in the detail.php file, as well as the 'catid' parameter in both the get.php and index.php scripts. These vulnerabilities can lead to exposure of sensitive information and compromise the integrity of the application.