Multiple SQL injection vulnerabilities in VBZooM 1.02 allow remote attackers to execute arbitrary SQL commands via the (1) QuranID, (2) ShowByQuranID, or (3) Action parameters to meaning.php.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Vbzoom | Vbzoom | 1.02 (including) | 1.02 (including) |