SQL injection vulnerability in index.php in Appalachian State University phpWebSite 0.10.1 and earlier allows remote attackers to execute arbitrary SQL commands via the module parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
| Software | From | Fixed in |
|---|---|---|
| phpwebsite / phpwebsite | - | 0.10.1.x |
| phpwebsite / phpwebsite | 0.9.1 | 0.9.1.x |
| phpwebsite / phpwebsite | 0.9.2 | 0.9.2.x |
| phpwebsite / phpwebsite | 0.9.3.1 | 0.9.3.1.x |
| phpwebsite / phpwebsite | 0.9.3.4 | 0.9.3.4.x |
| phpwebsite / phpwebsite | 0.8.2 | 0.8.2.x |
| phpwebsite / phpwebsite | 0.9.3.3 | 0.9.3.3.x |
| phpwebsite / phpwebsite | 0.9.3.2 | 0.9.3.2.x |
| phpwebsite / phpwebsite | 0.9.3 | 0.9.3.x |
| phpwebsite / phpwebsite | 0.10 | 0.10.x |
| phpwebsite / phpwebsite | 0.9.0 | 0.9.0.x |
| phpwebsite / phpwebsite | 0.8.3 | 0.8.3.x |
| phpwebsite / phpwebsite | 0.7.3 | 0.7.3.x |