Security Advisory
CVE-2008-3377
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
SQL injection vulnerability in picture.php in phpTest 0.6.3 allows remote attackers to execute arbitrary SQL commands via the image_id parameter.