SQL injection vulnerability in the files mod in index.php in BXCP 0.3.0.4 allows remote attackers to execute arbitrary SQL commands via the where parameter in a view action.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Bxcp | Bxcp | 0.2.9.7 (including) | 0.2.9.7 (including) |
| Bxcp | Bxcp | 0.3 (including) | 0.3 (including) |