SQL injection vulnerability in topics.php in Appalachian State University phpWebSite 0.10.2 and earlier allows remote attackers to execute arbitrary SQL commands via the topic parameter.
| Software | From | Fixed in |
|---|---|---|
| phpwebsite / phpwebsite | 0.10.1 | 0.10.1.x |
| phpwebsite / phpwebsite | 0.9.3.1 | 0.9.3.1.x |
| phpwebsite / phpwebsite | 0.9.3.4 | 0.9.3.4.x |
| phpwebsite / phpwebsite | 0.8.2 | 0.8.2.x |
| phpwebsite / phpwebsite | 0.9.3.3 | 0.9.3.3.x |
| phpwebsite / phpwebsite | 0.9.3.2 | 0.9.3.2.x |
| phpwebsite / phpwebsite | 0.10.2 | 0.10.2.x |
| phpwebsite / phpwebsite | 0.9.3 | 0.9.3.x |
| phpwebsite / phpwebsite | 0.10 | 0.10.x |
| phpwebsite / phpwebsite | 0.8.3 | 0.8.3.x |
| phpwebsite / phpwebsite | 0.7.3 | 0.7.3.x |