SQL Injection in Phpcheckz

CVE-2010-4143

SQL injection vulnerability in chart.php in phpCheckZ 1.1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter.

Vulnerability class: SQL Injection

EPSS: 0.008 (53.7th percentile) — read the EPSS interpretation.

Affected products

  • Phpcheckz — versions 1.1.0
  • N/a — versions n/a

Weakness classification (CWE)

References