info
discussion
exploit
solution
references
PHPSurveyor SID Parameter SQL Injection Vulnerability
Solution:
The vendor has released PHPSurveyor 0.991 to address this issue.
PHPSurveyor PHPSurveyor 0.99
PHPSurveyor phpsurveyor-0_991.zip
http://prdownloads.sourceforge.net/phpsurveyor/phpsurveyor-0_991.zip?d ownload
Privacy Statement
Copyright 2010, SecurityFocus