Multiple SQL injection vulnerabilities in phpDirectorySource 1.1.06, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) lid parameter to show.php and the (2) login parameter to admin.php.
| Software | From | Fixed in |
|---|---|---|
| php_directory_source / phpdirectorysource | 1.1.06 | 1.1.06.x |