CVE-2005-0774 - Raciest Pad
Description
SQL injection vulnerability in member.php and possibly other scripts in PhotoPost PHP 5.0 RC3 allows remote attackers to execute arbitrary SQL commands via the uid parameter.
Reference
http://www.securityfocus.com/bid/12779 http://secunia.com/advisories/14576 http://marc.info/?l=bugtraq&m=111065868402859&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/19675