SQL injection vulnerability in show.php in vbzoom 1.11 allow remote attackers to execute arbitrary SQL commands via the MainID parameter. NOTE: the SubjectID vector is already covered by CVE-2005-4729.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Vbzoom | Vbzoom | 1.11 (including) | 1.11 (including) |