SQL injection vulnerability in lyrics_song.php in the Lyrics (lyrics_menu) plugin 0.42 for e107 allows remote attackers to execute arbitrary SQL commands via the l_id parameter. NOTE: some of these details are obtained from third party information.
| Software | From | Fixed in |
|---|---|---|
| w1n78 / lyrics | 0.4.2 | 0.4.2.x |