SQL injection vulnerability in category.php in PHCDownload 1.0.0 Final and 1.0.0 Release Candidate 6 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Phcdownload | Phpcredo | * | 1.0.0_release_candidate_6 (including) |
| Phcdownload | Phpcredo | 1.0.0_final (including) | 1.0.0_final (including) |