SQL injection vulnerability in search.php in VCD-db 0.98 and earlier allows remote attackers to execute arbitrary SQL commands via the by parameter.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Vcd-db | Vcd-db | 0.97 (including) | 0.97 (including) |
| Vcd-db | Vcd-db | 0.98 (including) | 0.98 (including) |
| Vcd-db | Vcd-db | 0.961 (including) | 0.961 (including) |
| Vcd-db | Vcd-db | 0.971 (including) | 0.971 (including) |
| Vcd-db | Vcd-db | 0.972 (including) | 0.972 (including) |
| Vcd-db | Vcd-db | 0.973 (including) | 0.973 (including) |