cve/2011/CVE-2011-1556.md

CVE-2011-1556

Description

SQL injection vulnerability in plugins/pdfClasses/pdfgen.php in Andy's PHP Knowledgebase (Aphpkb) 0.95.4 allows remote attackers to execute arbitrary SQL commands via the pdfa parameter.

POC

Reference

• http://www.autosectools.com/Advisories/Andy%27s.PHP.Knowledgebase.Project.0.95.4_SQL.Injection_161.html
• http://www.exploit-db.com/exploits/17061/

Github

No PoCs found on GitHub currently.