SQL injection vulnerability in viewcat.php in the WF-Links (wflinks) 1.03 and earlier module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Wf-links | Wf-links | * | 1.03 (including) |